From: Markus Theil <markus.theil@tu-ilmenau.de>
Date: Sun, 9 Feb 2020 16:59:00 +0000 (+0100)
Subject: iw: scan: fix buffer over-read in print_p2p
X-Git-Tag: v5.8~38
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=505f9e4834924cbc0b283a36ef858940148851d4;p=thirdparty%2Fiw.git

iw: scan: fix buffer over-read in print_p2p

Signed-off-by: Markus Theil <markus.theil@tu-ilmenau.de>
Link: https://lore.kernel.org/r/20200209165902.44110-7-markus.theil@tu-ilmenau.de
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
---

diff --git a/scan.c b/scan.c
index 2114cfe..fd49038 100644
--- a/scan.c
+++ b/scan.c
@@ -2045,7 +2045,7 @@ static inline void print_p2p(const uint8_t type, uint8_t len,
 		case 0x12: /* invitation flags */
 		case 0xdd: /* vendor specific */
 		default: {
-			const __u8 *subdata = data + 4;
+			const __u8 *subdata = data + 3;
 			__u16 tmplen = sublen;
 
 			tab_on_first(&first);