iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net/mac80211
History
Johannes Berg 03029bb044 mac80211: validate extended element ID is present 
commit 768c0b19b50665e337c96858aa2b7928d6dcf756 upstream.

Before attempting to parse an extended element, verify that
the extended element ID is present.

Fixes: 41cbb0f5a295 ("mac80211: add support for HE")
Reported-by: syzbot+59bdff68edce82e393b6@syzkaller.appspotmail.com
Link: https://lore.kernel.org/r/20211211201023.f30a1b128c07.I5cacc176da94ba316877c6e10fe3ceec8b4dbd7d@changeid
Cc: stable@vger.kernel.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-12-22 09:19:03 +01:00
..
aead_api.c
…
aead_api.h
…
aes_ccm.h
…
aes_cmac.c
…
aes_cmac.h
…
aes_gcm.h
…
aes_gmac.c
…
aes_gmac.h
…
agg-rx.c
mac80211: add support for HE
2018-06-18 22:40:32 +02:00
agg-tx.c
mac80211: send ADDBA requests using the tid/queue of the aggregation session
2021-12-22 09:19:00 +01:00
cfg.c
mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN
2021-04-28 13:16:50 +02:00
chan.c
treewide: kzalloc() -> kcalloc()
2018-06-12 16:19:22 -07:00
debug.h
…
debugfs_key.c
…
debugfs_key.h
…
debugfs_netdev.c
mac80211: fix txq null pointer dereference
2019-10-29 09:19:33 +01:00
debugfs_netdev.h
…
debugfs_sta.c
mac80211: drop data frames without key on encrypted links
2021-08-26 08:36:42 -04:00
debugfs_sta.h
…
debugfs.c
…
debugfs.h
…
driver-ops.c
mac80211: fix station rate table updates on assoc
2021-02-10 09:21:07 +01:00
driver-ops.h
mac80211: do not call driver wake_tx_queue op during reconfig
2019-04-27 09:36:38 +02:00
ethtool.c
mac80211: use BIT_ULL for NL80211_STA_INFO_* attribute types
2018-06-29 09:53:09 +02:00
fils_aead.c
…
fils_aead.h
…
he.c
mac80211: add support for HE
2018-06-18 22:40:32 +02:00
ht.c
ieee80211: bump IEEE80211_MAX_AMPDU_BUF to support HE
2018-06-18 22:39:39 +02:00
ibss.c
mac80211: fix double free in ibss_leave
2021-03-30 14:37:03 +02:00
ieee80211_i.h
mac80211: remove warning in ieee80211_get_sband()
2021-06-30 08:48:30 -04:00
iface.c
mac80211: add fragment cache to sta_info
2021-06-03 08:38:03 +02:00
Kconfig
…
key.c
mac80211: drop data frames without key on encrypted links
2021-08-26 08:36:42 -04:00
key.h
mac80211: prevent mixed key and fragment cache attacks
2021-06-03 08:38:03 +02:00
led.c
leds: triggers: let struct led_trigger::activate() return an error code
2018-07-05 23:21:10 +02:00
led.h
…
main.c
mac80211: bail out if cipher schemes are invalid
2021-05-22 10:59:36 +02:00
Makefile
mac80211: add support for HE
2018-06-18 22:40:32 +02:00
mesh_hwmp.c
mac80211: fix potential overflow when multiplying to u32 integers
2021-03-04 09:39:36 +01:00
mesh_pathtbl.c
mac80211: check return value of rhashtable_init
2021-10-17 10:19:49 +02:00
mesh_plink.c
mac80211: mesh: fix premature update of rc stats
2018-05-18 10:02:28 +02:00
mesh_ps.c
…
mesh_sync.c
…
mesh.c
mac80211: free peer keys before vif down in mesh
2019-07-14 08:11:06 +02:00
mesh.h
mac80211: Use linked list instead of rhashtable walk for mesh tables
2019-02-27 10:08:49 +01:00
michael.c
…
michael.h
…
mlme.c
mac80211: track only QoS data frames for admission control
2021-12-22 09:19:01 +01:00
ocb.c
…
offchannel.c
mac80211: support scan features for improved scan privacy
2018-06-15 13:34:40 +02:00
pm.c
…
rate.c
mac80211: fix station rate table updates on assoc
2021-02-10 09:21:07 +01:00
rate.h
…
rc80211_minstrel_debugfs.c
…
rc80211_minstrel_ht_debugfs.c
…
rc80211_minstrel_ht.c
mac80211: minstrel_ht: fix per-group max throughput rate initialization
2020-01-27 14:51:06 +01:00
rc80211_minstrel_ht.h
…
rc80211_minstrel.c
mac80211: minstrel: fix tx status processing corner case
2020-11-24 13:27:26 +01:00
rc80211_minstrel.h
mac80211: minstrel: remove deferred sampling code
2020-11-24 13:27:25 +01:00
rx.c
mac80211: Drop frames from invalid MAC address in ad-hoc mode
2021-10-17 10:19:49 +02:00
scan.c
This round's updates:
2018-06-30 21:08:12 +09:00
spectmgmt.c
…
sta_info.c
mac80211: remove iwlwifi specific workaround NDPs of null_response
2021-07-20 16:15:51 +02:00
sta_info.h
mac80211: drop data frames without key on encrypted links
2021-08-26 08:36:42 -04:00
status.c
mac80211: add ieee80211_is_any_nullfunc()
2020-05-10 10:30:12 +02:00
tdls.c
mac80211: add option for setting control flags
2020-04-02 15:28:20 +02:00
tkip.c
mac80211: Fix TKIP replay protection immediately after key setup
2020-02-05 14:43:46 +00:00
tkip.h
…
trace_msg.h
mac80211: Increase MAX_MSG_LEN
2019-05-16 19:41:20 +02:00
trace.c
…
trace.h
mac80211: add support for HE
2018-06-18 22:40:32 +02:00
tx.c
mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
2021-10-06 15:31:22 +02:00
util.c
mac80211: validate extended element ID is present
2021-12-22 09:19:03 +01:00
vht.c
mac80211: don't set set TDLS STA bandwidth wider than possible
2020-12-30 11:26:03 +01:00
wep.c
…
wep.h
…
wme.c
…
wme.h
…
wpa.c
mac80211: fix use-after-free in CCMP/GCMP RX
2021-10-06 15:31:21 +02:00
wpa.h
…