Adrien Schildknecht f5eeb5fa19 mac80211: fix invalid read in minstrel_sort_best_tp_rates() ...

At the last iteration of the loop, j may equal zero and thus
tp_list[j - 1] causes an invalid read.
Change the logic of the loop so that j - 1 is always >= 0.

Cc: stable@vger.kernel.org
Signed-off-by: Adrien Schildknecht <adrien+dev@schischi.me>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>

2015-08-13 13:52:34 +02:00

..

aes_ccm.c

…

aes_ccm.h

…

aes_cmac.c

…

aes_cmac.h

…

aes_gcm.c

…

aes_gcm.h

…

aes_gmac.c

…

aes_gmac.h

…

agg-rx.c

…

agg-tx.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

cfg.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

cfg.h

…

chan.c

…

debug.h

…

debugfs_key.c

mac80211: move TX PN to public part of key struct

2015-06-02 11:16:35 +02:00

debugfs_key.h

…

debugfs_netdev.c

mac80211: clear subdir_stations when removing debugfs

2015-07-17 10:53:19 +02:00

debugfs_netdev.h

…

debugfs_sta.c

…

debugfs_sta.h

…

debugfs.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

debugfs.h

…

driver-ops.h

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

ethtool.c

…

event.c

…

ht.c

…

ibss.c

mac80211: fix the beacon csa counter for mesh and ibss

2015-06-09 22:04:25 +02:00

ieee80211_i.h

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-06-01 22:51:30 -07:00

iface.c

mac80211: shut down interfaces before destroying interface list

2015-07-17 11:16:26 +02:00

Kconfig

…

key.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-06-24 02:58:51 -07:00

key.h

Merge remote-tracking branch 'net-next/master' into mac80211-next

2015-06-10 12:45:09 +02:00

led.c

…

led.h

…

main.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

Makefile

…

mesh_hwmp.c

mac80211: Fix a case of incorrect metric used when forwarding a PREQ

2015-06-10 11:52:59 +02:00

mesh_pathtbl.c

…

mesh_plink.c

mac80211: add missing length check for confirm frames

2015-07-17 14:39:42 +02:00

mesh_ps.c

…

mesh_sync.c

…

mesh.c

mac80211: fix the beacon csa counter for mesh and ibss

2015-06-09 22:04:25 +02:00

mesh.h

…

michael.c

…

michael.h

…

mlme.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

ocb.c

…

offchannel.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

pm.c

mac80211: wowlan: enable powersave if suspend while ps-polling

2015-07-17 11:13:21 +02:00

rate.c

Minor merge needed, due to function move.

2015-07-01 10:49:25 -07:00

rate.h

…

rc80211_minstrel_debugfs.c

…

rc80211_minstrel_ht_debugfs.c

…

rc80211_minstrel_ht.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

rc80211_minstrel_ht.h

…

rc80211_minstrel.c

mac80211: fix invalid read in minstrel_sort_best_tp_rates()

2015-08-13 13:52:34 +02:00

rc80211_minstrel.h

…

rx.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

scan.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

spectmgmt.c

…

sta_info.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

sta_info.h

mac80211: Always check rates and capabilities in mesh mode

2015-06-09 22:05:06 +02:00

status.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

tdls.c

cfg80211: use RTNL locked reg_can_beacon for IR-relaxation

2015-07-17 15:02:02 +02:00

tkip.c

…

tkip.h

…

trace_msg.h

…

trace.c

…

trace.h

…

tx.c

mac80211: don't clear all tx flags when requeing

2015-07-17 11:06:21 +02:00

util.c

mac80211: convert HW flags to unsigned long bitmap

2015-06-10 16:05:36 +02:00

vht.c

…

wep.c

…

wep.h

…

wme.c

…

wme.h

…

wpa.c

mac80211: move TX PN to public part of key struct

2015-06-02 11:16:35 +02:00

wpa.h

…