diff options
| author | bschmidt <bschmidt@FreeBSD.org> | 2011-01-19 17:40:58 +0000 |
|---|---|---|
| committer | bschmidt <bschmidt@FreeBSD.org> | 2011-01-19 17:40:58 +0000 |
| commit | 7276c51686b8ff6b7a9e98912a6069cfae320a70 (patch) | |
| tree | 546056d891823adb00d9f055ad675d877358e6ef /sys/net80211/ieee80211_mesh.c | |
| parent | e84823c8d6e4f833da7dbcfeb654e59a76b6d10e (diff) | |
| download | FreeBSD-src-7276c51686b8ff6b7a9e98912a6069cfae320a70.zip FreeBSD-src-7276c51686b8ff6b7a9e98912a6069cfae320a70.tar.gz | |
Jump to the next element and not to an arbitrary point. frm[1] contains
the element's data length, frm[2] is the first byte of the element's data.
Submitted by: Monthadar Al Jaberi <monthadar at gmail.com>
MFC after: 1 week
Diffstat (limited to 'sys/net80211/ieee80211_mesh.c')
| -rw-r--r-- | sys/net80211/ieee80211_mesh.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/net80211/ieee80211_mesh.c b/sys/net80211/ieee80211_mesh.c index 1086113..028fc14 100644 --- a/sys/net80211/ieee80211_mesh.c +++ b/sys/net80211/ieee80211_mesh.c @@ -1463,7 +1463,7 @@ mesh_recv_mgmt(struct ieee80211_node *ni, struct mbuf *m0, int subtype, meshid = frm; break; } - frm += frm[2] + 2; + frm += frm[1] + 2; } IEEE80211_VERIFY_ELEMENT(ssid, IEEE80211_NWID_LEN, return); IEEE80211_VERIFY_ELEMENT(rates, IEEE80211_RATE_MAXSIZE, return); |
