minor array overflow in ifconfig set80211chanlist()

Adrian Chadd adrian.chadd at gmail.com
Mon May 16 22:08:53 UTC 2016


On 16 May 2016 at 15:05, Andriy Voskoboinyk <avos at freebsd.org> wrote:
> Tue, 17 May 2016 01:03:03 +0300 було написано Adrian Chadd
> <adrian.chadd at gmail.com>:
>
>> Heh, god, it's used for both maximum ieee channel number /and/ the
>> array size? we should eventually fix that; 11ac channels will likely
>> overflow all of the above. :(
>
>
> No (yes) :)
> I mean ic->ic_nchans and nitems(ic->ic_channels)
> ... but you are right: ic_ieee is uint8_t, so it's limited by this number
> too.

Right. Well, for 11ac they still have the IEEE number, but they also
have separate frequency definitions in the IEs for upper/lower 80MHz
and the configuration therein.



-adrian


More information about the freebsd-wireless mailing list