You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Peng Xu f012cb7594 nl80211: Define policy for packet pattern attributes ... commit ad670233c9 upstream. Define a policy for packet pattern attributes in order to fix a potential read over the end of the buffer during nla_get_u32() of the NL80211_PKTPAT_OFFSET attribute. Note that the data there can always be read due to SKB allocation (with alignment and struct skb_shared_info at the end), but the data might be uninitialized. This could be used to leak some data from uninitialized vmalloc() memory, but most drivers don't allow an offset (so you'd just get -EINVAL if the data is non-zero) or just allow it with a fixed value - 100 or 128 bytes, so anything above that would get -EINVAL. With brcmfmac the limit is 1500 so (at least) one byte could be obtained. Signed-off-by: Peng Xu <pxu@qti.qualcomm.com> Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com> [rewrite description based on SKB allocation knowledge] Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		5 years ago
..
.gitignore	…
Kconfig	cfg80211: Fix some linguistics in Kconfig	7 years ago
Makefile	cfg80211: 802.11p OCB mode handling	8 years ago
ap.c	cfg80211: export interface stopping function	9 years ago
chan.c	cfg80211: add start / stop NAN commands	7 years ago
core.c	cfg80211: add add_nan_func / del_nan_func	7 years ago
core.h	cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts	6 years ago
db.txt	…
debugfs.c	cfg80211: remove enum ieee80211_band	7 years ago
debugfs.h	…
ethtool.c	cfg80211: make ethtool the driver's responsibility	9 years ago
genregdb.awk	wireless: fixup genregdb.awk for remove of antenna gain from wireless-regd	9 years ago
ibss.c	cfg80211: Add support for static WEP in the driver	7 years ago
lib80211.c	lib80211: remove unused print_ssid()	9 years ago
lib80211_crypt_ccmp.c	lib80211: ratelimit key index mismatch	7 years ago
lib80211_crypt_tkip.c	lib80211: Use skcipher and ahash	7 years ago
lib80211_crypt_wep.c	lib80211: Use skcipher and ahash	7 years ago
mesh.c	cfg80211: remove enum ieee80211_band	7 years ago
mlme.c	cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts	6 years ago
nl80211.c	nl80211: Define policy for packet pattern attributes	5 years ago
nl80211.h	cfg80211: always notify userspace of new wireless netdevs	7 years ago
ocb.c	cfg80211: ocb: Fix null pointer deref if join_ocb is unimplemented	7 years ago
radiotap.c	cfg80211: add radiotap VHT info to rtap_namespace_sizes	7 years ago
rdev-ops.h	cfg80211: allow the user space to change current NAN configuration	7 years ago
reg.c	cfg80211: make wdev_list accessible to drivers	7 years ago
reg.h	cfg80211: remove enum ieee80211_band	7 years ago
regdb.h	…
scan.c	cfg80211: limit scan results cache size	6 years ago
sme.c	cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts	6 years ago
sysfs.c	cfg80211: check rdev resume callback only for registered wiphy	6 years ago
sysfs.h	net: misc: Remove extern from function prototypes	10 years ago
trace.c	cfg80211: add tracing to rdev-ops	11 years ago
trace.h	cfg80211: allow the user space to change current NAN configuration	7 years ago
util.c	mac80211: strictly check mesh address extension mode	6 years ago
wext-compat.c	cfg80211: Add support for static WEP in the driver	7 years ago
wext-compat.h	cfg80211-wext: export symbols only when needed	8 years ago
wext-core.c	Revert "wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel"	7 years ago
wext-priv.c	…
wext-proc.c	net: proc: change proc_net_remove to remove_proc_entry	10 years ago
wext-sme.c	cfg80211: Add support for static WEP in the driver	7 years ago
wext-spy.c	wireless: Convert compare_ether_addr to ether_addr_equal	11 years ago