Johannes Berg f1f3e9e2a5 mac80211: fix IBSS presp allocation size ...

When VHT IBSS support was added, the size of the extra elements
wasn't considered in ieee80211_ibss_build_presp(), which makes
it possible that it would overrun the allocated buffer. Fix it
by allocating the necessary space.

Fixes: abcff6ef01f9 ("mac80211: add VHT support for IBSS")
Reported-by: Shaul Triebitz <shaul.triebitz@intel.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>

2017-05-08 11:25:04 +02:00

..

aes_ccm.c

…

aes_ccm.h

…

aes_cmac.c

mac80211: aes-cmac: switch to shash CMAC driver

2017-02-08 09:19:33 +01:00

aes_cmac.h

mac80211: aes-cmac: switch to shash CMAC driver

2017-02-08 09:19:33 +01:00

aes_gcm.c

…

aes_gcm.h

…

aes_gmac.c

…

aes_gmac.h

…

agg-rx.c

mac80211: Use setup_timer instead of init_timer

2017-03-06 13:23:05 +01:00

agg-tx.c

mac80211: Use setup_timer instead of init_timer

2017-03-06 13:23:05 +01:00

cfg.c

mac80211: Fix possible sband related NULL pointer de-reference

2017-04-28 12:28:44 +02:00

chan.c

…

debug.h

…

debugfs_key.c

…

debugfs_key.h

…

debugfs_netdev.c

…

debugfs_netdev.h

…

debugfs_sta.c

…

debugfs_sta.h

…

debugfs.c

mac80211: check for allocation failure in debugfs code

2017-02-08 10:05:07 +01:00

debugfs.h

…

driver-ops.c

…

driver-ops.h

…

ethtool.c

…

fils_aead.c

Some more updates:

2017-02-10 14:31:51 -05:00

fils_aead.h

…

ht.c

…

ibss.c

mac80211: fix IBSS presp allocation size

2017-05-08 11:25:04 +02:00

ieee80211_i.h

mac80211: Add support for BSS max idle period element

2017-04-28 12:28:45 +02:00

iface.c

My last pull request has been a while, we now have:

2017-04-20 13:54:40 -04:00

Kconfig

…

key.c

…

key.h

mac80211: aes-cmac: switch to shash CMAC driver

2017-02-08 09:19:33 +01:00

led.c

…

led.h

…

main.c

mac80211: disentangle iflist_mtx and chanctx_mtx

2017-04-26 23:17:44 +02:00

Makefile

…

mesh_hwmp.c

mac80211: fix mesh fail_avg check

2017-03-06 09:21:46 +01:00

mesh_pathtbl.c

mac80211: Use setup_timer instead of init_timer for mesh path

2017-03-16 10:54:04 +01:00

mesh_plink.c

mac80211: Fix possible sband related NULL pointer de-reference

2017-04-28 12:28:44 +02:00

mesh_ps.c

…

mesh_sync.c

…

mesh.c

mac80211: Fix possible sband related NULL pointer de-reference

2017-04-28 12:28:44 +02:00

mesh.h

…

michael.c

…

michael.h

…

mlme.c

mac80211: bail out from prep_connection() if a reconfig is ongoing

2017-05-08 11:23:50 +02:00

ocb.c

…

offchannel.c

…

pm.c

cfg80211: add request id to cfg80211_sched_scan_*() api

2017-04-28 14:51:43 +02:00

rate.c

mac80211: Fix possible sband related NULL pointer de-reference

2017-04-28 12:28:44 +02:00

rate.h

mac80211: make rate control tx status API more extensible

2017-04-28 10:57:33 +02:00

rc80211_minstrel_debugfs.c

…

rc80211_minstrel_ht_debugfs.c

…

rc80211_minstrel_ht.c

mac80211: make rate control tx status API more extensible

2017-04-28 10:57:33 +02:00

rc80211_minstrel_ht.h

…

rc80211_minstrel.c

mac80211: make rate control tx status API more extensible

2017-04-28 10:57:33 +02:00

rc80211_minstrel.h

…

rx.c

mac80211: rename ieee80211_rx_status::vht_nss to just nss

2017-04-28 10:41:53 +02:00

scan.c

cfg80211: add request id to cfg80211_sched_scan_*() api

2017-04-28 14:51:43 +02:00

spectmgmt.c

ieee80211: rename CCFS1/CCFS2 to CCFS0/CCFS1

2017-03-06 09:21:43 +01:00

sta_info.c

mac80211: Fix possible sband related NULL pointer de-reference

2017-04-28 12:28:44 +02:00

sta_info.h

mac80211: use bitfield macros for encoded rate

2017-04-28 10:41:58 +02:00

status.c

mac80211: add ieee80211_tx_status_ext

2017-04-28 11:08:21 +02:00

tdls.c

mac80211: Fix possible sband related NULL pointer de-reference

2017-04-28 12:28:44 +02:00

tkip.c

…

tkip.h

…

trace_msg.h

…

trace.c

…

trace.h

cfg80211: fix NAN bands definition

2017-02-09 15:17:30 +01:00

tx.c

mac80211: Fix possible sband related NULL pointer de-reference

2017-04-28 12:28:44 +02:00

util.c

cfg80211: add request id to cfg80211_sched_scan_*() api

2017-04-28 14:51:43 +02:00

vht.c

…

wep.c

…

wep.h

…

wme.c

…

wme.h

…

wpa.c

…

wpa.h

…