Johannes Berg 35f432a03e mac80211: initialize fast-xmit 'info' later ... In ieee80211_xmit_fast(), 'info' is initialized to point to the skb that's passed in, but that skb may later be replaced by a clone (if it was shared), leading to an invalid pointer. This can lead to use-after-free and also later crashes since the real SKB's info->hw_queue doesn't get initialized properly. Fix this by assigning info only later, when it's needed, after the skb replacement (may have) happened. Cc: stable@vger.kernel.org Reported-by: Ben Greear <greearb@candelatech.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com>		2017-01-02 11:28:25 +01:00
..
aes_ccm.c	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
aes_ccm.h	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
aes_cmac.c	mac80211: FILS AEAD protection for station mode association frames	2016-10-27 16:03:25 +02:00
aes_cmac.h	mac80211: FILS AEAD protection for station mode association frames	2016-10-27 16:03:25 +02:00
aes_gcm.c	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
aes_gcm.h	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
aes_gmac.c	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
aes_gmac.h	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
agg-rx.c	mac80211: fix tid_agg_rx NULL dereference	2016-10-19 12:11:49 +02:00
agg-tx.c	mac80211: reject TSPEC TIDs (TSIDs) for aggregation	2016-09-15 10:08:52 +02:00
cfg.c	mac80211: validate new interface's beacon intervals	2016-10-27 09:18:07 +02:00
chan.c	mac80211: add boilerplate code for start / stop NAN	2016-09-30 13:21:19 +02:00
debug.h
debugfs_key.c
debugfs_key.h
debugfs_netdev.c	mac80211: filter multicast data packets on AP / AP_VLAN	2016-10-12 11:33:29 +02:00
debugfs_netdev.h
debugfs_sta.c	mac80211: improve RX aggregation data in debugfs	2016-10-19 12:12:11 +02:00
debugfs_sta.h
debugfs.c	mac80211: add a HW flag for supporting HW TX fragmentation	2016-10-19 12:12:44 +02:00
debugfs.h
driver-ops.c	mac80211: add offset_tsf driver op and use it for mesh	2016-09-30 13:45:44 +02:00
driver-ops.h	mac80211: add offset_tsf driver op and use it for mesh	2016-09-30 13:45:44 +02:00
ethtool.c
fils_aead.c	mac80211: fils_aead: fix encrypt error handling	2016-10-28 12:59:12 +02:00
fils_aead.h	mac80211: FILS AEAD protection for station mode association frames	2016-10-27 16:03:25 +02:00
ht.c
ibss.c
ieee80211_i.h	linux: drop __bitwise__ everywhere	2016-12-16 00:13:41 +02:00
iface.c	Among various cleanups and improvements, we have the following:	2016-10-29 17:28:45 -04:00
Kconfig
key.c	mac80211: don't call drv_set_default_unicast_key() for VLANs	2016-12-13 15:57:59 +01:00
key.h
led.c
led.h
main.c	mac80211: Claim Fast Initial Link Setup (FILS) STA support	2016-10-27 16:03:26 +02:00
Makefile	Makefile: drop -D__CHECK_ENDIAN__ from cflags	2016-12-16 00:13:43 +02:00
mesh_hwmp.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-09-23 06:46:57 -04:00
mesh_pathtbl.c
mesh_plink.c
mesh_ps.c
mesh_sync.c	mac80211: mesh: decrease max drift	2016-09-30 13:47:00 +02:00
mesh.c
mesh.h
michael.c
michael.h
mlme.c	cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts	2016-12-09 12:57:49 +01:00
ocb.c
offchannel.c	mac80211: fix CMD_FRAME for AP_VLAN	2016-10-12 09:19:12 +02:00
pm.c	mac80211: remove useless open_count check	2016-09-13 15:39:29 +02:00
rate.c
rate.h
rc80211_minstrel_debugfs.c
rc80211_minstrel_ht_debugfs.c
rc80211_minstrel_ht.c
rc80211_minstrel_ht.h
rc80211_minstrel.c
rc80211_minstrel.h
rx.c	mac80211: Ensure enough headroom when forwarding mesh pkt	2016-12-13 16:08:37 +01:00
scan.c	mac80211: fix scan completed tracing	2016-09-15 16:46:16 +02:00
spectmgmt.c
sta_info.c	mac80211: fix legacy and invalid rx-rate report	2016-12-15 10:54:48 +01:00
sta_info.h	mac80211: fix tid_agg_rx NULL dereference	2016-10-19 12:11:49 +02:00
status.c	mac80211: Use rhltable instead of rhashtable	2016-09-20 04:43:36 -04:00
tdls.c
tkip.c
tkip.h
trace_msg.h
trace.c
trace.h	mac80211: add offset_tsf driver op and use it for mesh	2016-09-30 13:45:44 +02:00
tx.c	mac80211: initialize fast-xmit 'info' later	2017-01-02 11:28:25 +01:00
util.c	mac80211: validate new interface's beacon intervals	2016-10-27 09:18:07 +02:00
vht.c	mac80211: Ignore VHT IE from peer with wrong rx_mcs_map	2016-11-15 14:18:43 +01:00
wep.c
wep.h
wme.c	mac80211: preserve more bits when building QoS header	2016-10-12 14:17:13 +02:00
wme.h
wpa.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-10-30 12:42:58 -04:00
wpa.h