From: Ilan Peer <ilan.peer@intel.com>
Date: Thu, 8 Apr 2021 12:32:24 +0000 (+0200)
Subject: cfg80211: Remove wrong RNR IE validation check
X-Git-Tag: v5.13-rc1~94^2~87^2~16
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8a16ffdc4cf37c1e6204054b0fb44052c8a48f0d;p=thirdparty%2Fkernel%2Flinux.git

cfg80211: Remove wrong RNR IE validation check

Remove a wrong length check for RNR information element as it
can have arbitrary length.

Signed-off-by: Ilan Peer <ilan.peer@intel.com>
Link: https://lore.kernel.org/r/20210408143224.c7eeaf1a5270.Iead7762982e941a1cbff93f68bf8b5139447ff0c@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
---

diff --git a/net/wireless/scan.c b/net/wireless/scan.c
index 019952d4fc7db..c3b51efff5c69 100644
--- a/net/wireless/scan.c
+++ b/net/wireless/scan.c
@@ -589,7 +589,7 @@ static int cfg80211_parse_colocated_ap(const struct cfg80211_bss_ies *ies,
 
 	elem = cfg80211_find_elem(WLAN_EID_REDUCED_NEIGHBOR_REPORT, ies->data,
 				  ies->len);
-	if (!elem || elem->datalen > IEEE80211_MAX_SSID_LEN)
+	if (!elem)
 		return 0;
 
 	pos = elem->data;