[IWINFO PATCH v4 1/4] iwinfo: export ht and vht operation in scan results

[Jo-Philipp Wich]

Hi,

comments inline below.

> [...]@@ -2306,6 +2306,16 @@ static void nl80211_get_scanlist_ie(struct nlattr **bss,
>  				iwinfo_parse_rsn(&e->crypto, ie + 6, ie[1] - 4,
>  				                 IWINFO_CIPHER_TKIP, IWINFO_KMGMT_PSK);
>  			break;
> +		case 61: /* HT oeration */

Wrap the next three lines into  if (ie[1] >= 3) { ... } to avoid reading
beyond buffer end on malformed data.

> +			e->ht_chan_info.primary_chan = ie[2];
> +			e->ht_chan_info.secondary_chan_off = ie[3] & 0x3;
> +			e->ht_chan_info.chan_width = (ie[4] & 0x4)>>2;
> +			break;
> +		case 192: /* VHT operation */

Wrap the next three lines into  if (ie[1] >= 3) { ... } to avoid reading
beyond buffer end on malformed data.

> +			e->vht_chan_info.chan_width = ie[2];
> +			e->vht_chan_info.center_chan_1 = ie[3];
> +			e->vht_chan_info.center_chan_2 = ie[4];
> +			break;
>  		}
>  
>  		ielen -= ie[1] + 2;
> 

~ Jo

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20210105/073e2fcf/attachment.sig>