iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net/wireless
History
Johannes Berg f5c2ec288a wifi: cfg80211: fix buffer overflow in elem comparison 
[ Upstream commit 9f16b5c82a025cd4c864737409234ddc44fb166a ]

For vendor elements, the code here assumes that 5 octets
are present without checking. Since the element itself is
already checked to fit, we only need to check the length.

Reported-and-tested-by: Sönke Huster <shuster@seemoo.tu-darmstadt.de>
Fixes: 0b8fb8235be8 ("cfg80211: Parsing of Multiple BSSID information in scanning")
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-12-08 11:23:03 +01:00
..
certs
…
.gitignore
…
ap.c
…
chan.c
nl80211: Disallow setting of HT for channel 14
2019-10-30 10:07:22 +01:00
core.c
cfg80211: set custom regdomain after wiphy registration
2022-06-06 08:33:50 +02:00
core.h
nl80211: validate key indexes for cfg80211_registered_device
2021-06-10 13:37:02 +02:00
debugfs.c
wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
2022-09-15 12:04:50 +02:00
debugfs.h
…
ethtool.c
cfg80211: check wiphy driver existence for drvinfo report
2020-03-05 16:43:36 +01:00
ibss.c
cfg80211: ibss: use 11a mandatory rates for 6GHz band operation
2019-08-21 10:54:57 +02:00
Kconfig
lib80211: fix unmet direct dependendices config warning when !CRYPTO
2020-10-01 13:18:20 +02:00
lib80211_crypt_ccmp.c
lib80211: use crypto API ccm(aes) transform for CCMP processing
2019-07-26 13:22:47 +02:00
lib80211_crypt_tkip.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
lib80211_crypt_wep.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
lib80211.c
treewide: Add SPDX license identifier for more missed files
2019-05-21 10:50:45 +02:00
Makefile
cfg80211: make certificate generation more robust
2021-06-23 14:41:29 +02:00
mesh.c
…
mlme.c
cfg80211: Report Association Request frame IEs in association events
2019-02-22 13:35:09 +01:00
nl80211.c
nl80211: show SSID for P2P_GO interfaces
2022-06-14 18:11:32 +02:00
nl80211.h
cfg80211: Report Association Request frame IEs in association events
2019-02-22 13:35:09 +01:00
ocb.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
of.c
…
pmsr.c
cfg80211: avoid double free of PMSR request
2021-06-23 14:41:30 +02:00
radiotap.c
…
rdev-ops.h
cfg80211: Fix radar event during another phy CAC
2020-02-05 21:22:46 +00:00
reg.c
wifi: cfg80211: fix memory leak in query_regdb_file()
2022-11-25 17:42:04 +01:00
reg.h
mac80211: fix scan when operating on DFS channels in ETSI domains
2019-10-07 22:10:50 +02:00
scan.c
wifi: cfg80211: fix buffer overflow in elem comparison
2022-12-08 11:23:03 +01:00
sme.c
cfg80211: remove WARN_ON() in cfg80211_sme_connect
2021-04-14 08:24:18 +02:00
sysfs.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 432
2019-06-05 17:37:16 +02:00
sysfs.h
…
trace.c
…
trace.h
cfg80211: Fix radar event during another phy CAC
2020-02-05 21:22:46 +00:00
util.c
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
2021-11-26 10:47:22 +01:00
wext-compat.c
cfg80211: initialize on-stack chandefs
2019-10-01 17:56:18 +02:00
wext-compat.h
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
wext-core.c
wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
2021-02-03 23:25:56 +01:00
wext-priv.c
…
wext-proc.c
…
wext-sme.c
cfg80211: wext: avoid copying malformed SSIDs
2019-10-04 14:04:08 +02:00
wext-spy.c
wireless: wext-spy: Fix out-of-bounds warning
2021-07-19 08:53:12 +02:00