Bug#513000: Possible security flaw in ad-hoc probe request processing

[Ben Hutchings]

Proposed patch for rt2500:

--- rt2500.orig/Module/sanity.c
+++ rt2500/Module/sanity.c
@@ -380,7 +380,7 @@
 
     COPY_MAC_ADDR(Addr2, &Fr->Hdr.Addr2);
 
-    if ((Fr->Octet[0] != IE_SSID) || (Fr->Octet[1] > MAX_LEN_OF_SSID))
+    if ((Fr->Octet[0] != IE_SSID) || ((UCHAR)Fr->Octet[1] > MAX_LEN_OF_SSID))
     {
         DBGPRINT(RT_DEBUG_TRACE, "PeerProbeReqSanity fail - wrong SSID 
IE(Type=%d,Len=%d)\n",Fr->Octet[0],Fr->Octet[1]);
         return FALSE;
--- END ---

Ben.

signature.asc
Description: This is a digitally signed message part