diff --git a/net/wireless/scan.c b/net/wireless/scan.c index 11c68b159324..c34a09adf2db 100644 --- a/net/wireless/scan.c +++ b/net/wireless/scan.c @@ -2380,7 +2380,7 @@ cfg80211_inform_single_bss_frame_data(struct wiphy *wiphy, capability = le16_to_cpu(mgmt->u.probe_resp.capab_info); } - ies = kzalloc(sizeof(*ies) + ielen, gfp); + ies = kzalloc(struct_size(ies, data, ielen), gfp); if (!ies) return NULL; ies->len = ielen;