You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Johannes Berg 34459512ff mac80211: fix TKIP replay vulnerability ... Unlike CCMP, the presence or absence of the QoS field doesn't change the encryption, only the TID is used. When no QoS field is present, zero is used as the TID value. This means that it is possible for an attacker to take a QoS packet with TID 0 and replay it as a non-QoS packet. Unfortunately, mac80211 uses different IVs for checking the validity of the packet's TKIP IV when it checks TID 0 and when it checks non-QoS packets. This means it is vulnerable to this replay attack. To fix this, use the same replay counter for TID 0 and non-QoS packets by overriding the rx->queue value to 0 if it is 16 (non-QoS). This is a minimal fix for now. I caused this issue in commit 1411f9b531 Author: Johannes Berg <johannes@sipsolutions.net> Date: Thu Jul 10 10:11:02 2008 +0200 mac80211: fix RX sequence number check while fixing a sequence number issue (there, a separate counter needs to be used). Cc: stable@kernel.org Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: John W. Linville <linville@tuxdriver.com>		14 years ago
..
Kconfig	mac80211: remove the dependency on crypto_blkcipher	14 years ago
Makefile	mac80211: add the minstrel_ht rate control algorithm	15 years ago
aes_ccm.c	mac80211: Fix warnings due to -Wunused-but-set-variable	14 years ago
aes_ccm.h	…
aes_cmac.c	mac80211: Remove redundant checks for NULL before calls to crypto_free_cipher()	14 years ago
aes_cmac.h	…
agg-rx.c	mac80211: sparse RCU annotations	14 years ago
agg-tx.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6	14 years ago
cfg.c	nl80211: Move peer link state definition to nl80211	14 years ago
cfg.h	…
chan.c	mac80211: fix channel type recalculation with HT and non-HT interfaces	14 years ago
debugfs.c	mac80211: add basic support for WoWLAN	14 years ago
debugfs.h	mac80211: refactor debugfs function generation code	14 years ago
debugfs_key.c	mac80211: sparse RCU annotations	14 years ago
debugfs_key.h	mac80211: support separate default keys	14 years ago
debugfs_netdev.c	mac80211: fix SMPS debugfs locking	14 years ago
debugfs_netdev.h	mac80211: reduce reliance on netdev	15 years ago
debugfs_sta.c	mac80211: fix debugfs printk format warning	14 years ago
debugfs_sta.h	…
driver-ops.h	mac80211: add support for HW scheduled scan	14 years ago
driver-trace.c	mac80211: fix sparse warnings/errors	16 years ago
driver-trace.h	mac80211: add support for HW scheduled scan	14 years ago
event.c	cfg80211: use proper allocation flags	16 years ago
ht.c	mac80211: sparse RCU annotations	14 years ago
ibss.c	mac80211: fix IBSS teardown race	14 years ago
ieee80211_i.h	Revert "mac80211: Skip tailroom reservation for full HW-crypto devices"	14 years ago
iface.c	mac80211: call dev_alloc_name before copying name to sdata	14 years ago
key.c	Revert "mac80211: Skip tailroom reservation for full HW-crypto devices"	14 years ago
key.h	mac80211: sparse RCU annotations	14 years ago
led.c	mac80211: remove stray extern	14 years ago
led.h	mac80211: selective throughput LED trigger active	14 years ago
main.c	mac80211: add missing rcu_barrier	14 years ago
mesh.c	mac80211: mesh: move some code to make it static	14 years ago
mesh.h	mac80211: annotate and fix RCU in mesh code	14 years ago
mesh_hwmp.c	mac80211: sparse RCU annotations	14 years ago
mesh_pathtbl.c	Merge ssh://master.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 into for-davem	14 years ago
mesh_plink.c	nl80211: Move peer link state definition to nl80211	14 years ago
michael.c	…
michael.h	…
mlme.c	Revert "mac80211: stop queues before rate control updation"	14 years ago
offchannel.c	mac80211: Optimize scans on current operating channel.	14 years ago
pm.c	mac80211: add basic support for WoWLAN	14 years ago
rate.c	cfg80211/mac80211: improve ad-hoc multicast rate handling	14 years ago
rate.h	mac80211: add the minstrel_ht rate control algorithm	15 years ago
rc80211_minstrel.c	mac80211: fix contention time computation in minstrel, minstrel_ht	14 years ago
rc80211_minstrel.h	minstrel: make the rate control ops reusable from another rc implementation	15 years ago
rc80211_minstrel_debugfs.c	llseek: automatically add .llseek fop	15 years ago
rc80211_minstrel_ht.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 into for-davem	14 years ago
rc80211_minstrel_ht.h	minstrel_ht: move minstrel_mcs_groups declaration to header file	15 years ago
rc80211_minstrel_ht_debugfs.c	mac80211: disallow seeks in minstrel debug code	15 years ago
rc80211_pid.h	Fix common misspellings	14 years ago
rc80211_pid_algo.c	include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h	15 years ago
rc80211_pid_debugfs.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6	14 years ago
rx.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 into for-davem	14 years ago
scan.c	mac80211: fix ie memory allocation for scheduled scans	14 years ago
spectmgmt.c	mac80211: reduce reliance on netdev	15 years ago
sta_info.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 into for-davem	14 years ago
sta_info.h	nl80211: Move peer link state definition to nl80211	14 years ago
status.c	mac80211: allow low level drivers to report packet loss	14 years ago
tkip.c	mac80211: remove the dependency on crypto_blkcipher	14 years ago
tkip.h	mac80211: remove the dependency on crypto_blkcipher	14 years ago
tx.c	Revert "mac80211: Skip tailroom reservation for full HW-crypto devices"	14 years ago
util.c	mac80211: add basic support for WoWLAN	14 years ago
wep.c	mac80211: remove the dependency on crypto_blkcipher	14 years ago
wep.h	mac80211: remove the dependency on crypto_blkcipher	14 years ago
wme.c	mac80211: cleanup select_queue	14 years ago
wme.h	mac80211: fix skb buffering issue	15 years ago
work.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6	14 years ago
wpa.c	mac80211: fix TKIP replay vulnerability	14 years ago
wpa.h	…