• Johannes Berg's avatar
    mac80211: reject zero cookie in mgmt-tx/roc cancel · 7d37fcd4
    Johannes Berg authored
    When cancelling, you can cancel "any" (first in list) mgmt-tx
    or remain-on-channel operation by using the value 0 for the
    cookie along with the *opposite* operation, i.e.
     * cancel the first mgmt-tx by cancelling roc with 0 cookie
     * cancel the first roc by cancelling mgmt-tx with 0 cookie
    
    This isn't really that bad since userspace should only pass
    cookies that we gave it, but could lead to hard-to-debug
    issues so better prevent it and reject zero values since we
    never hand those out.
    Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
    7d37fcd4
offchannel.c 26 KB