kernel_samsung_sm7125

jenna

History

Johannes Berg f5563318ff wireless: radiotap: fix parsing buffer overrun When parsing an invalid radiotap header, the parser can overrun the buffer that is passed in because it doesn't correctly check 1) the minimum radiotap header size 2) the space for extended bitmaps The first issue doesn't affect any in-kernel user as they all check the minimum size before calling the radiotap function. The second issue could potentially affect the kernel if an skb is passed in that consists only of the radiotap header with a lot of extended bitmaps that extend past the SKB. In that case a read-only buffer overrun by at most 4 bytes is possible. Fix this by adding the appropriate checks to the parser. Cc: stable@vger.kernel.org Reported-by: Evan Huus <eapache@gmail.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com>		11 years ago
..
.gitignore	…
Kconfig	…
Makefile	…
ap.c	…
chan.c	…
core.c	cfg80211: don't add p2p device while in RFKILL	11 years ago
core.h	cfg80211: don't add p2p device while in RFKILL	11 years ago
db.txt	…
debugfs.c	…
debugfs.h	…
ethtool.c	…
ethtool.h	…
genregdb.awk	…
ibss.c	cfg80211: fix warning when using WEXT for IBSS	12 years ago
lib80211.c	…
lib80211_crypt_ccmp.c	…
lib80211_crypt_tkip.c	…
lib80211_crypt_wep.c	…
mesh.c	cfg80211/mac80211: get mandatory rates based on scan width	12 years ago
mlme.c	cfg80211: add flags to cfg80211_rx_mgmt()	12 years ago
nl80211.c	cfg80211: use the correct macro to check for active monitor support	12 years ago
nl80211.h	cfg80211: add flags to cfg80211_rx_mgmt()	12 years ago
radiotap.c	wireless: radiotap: fix parsing buffer overrun	11 years ago
rdev-ops.h	cfg80211: add wdev to testmode cmd	12 years ago
reg.c	regulatory: use correct regulatory initiator on wiphy register	12 years ago
reg.h	…
regdb.h	…
scan.c	wireless: scan: Remove comment to compare_ether_addr	12 years ago
sme.c	cfg80211: don't request disconnect if not connected	12 years ago
sysfs.c	net: wireless: convert class code to use dev_groups	12 years ago
sysfs.h	…
trace.c	…
trace.h	cfg80211: add wdev to testmode cmd	12 years ago
util.c	cfg80211/mac80211: get mandatory rates based on scan width	12 years ago
wext-compat.c	…
wext-compat.h	…
wext-core.c	…
wext-priv.c	…
wext-proc.c	…
wext-sme.c	…
wext-spy.c	…