shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-08 03:40:35 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
39768890072df373ff5906677a2a575fcb43c29e
linux/net
History
Johannes Berg 5de1ecd286 mac80211: bail out if cipher schemes are invalid 
[ Upstream commit db878e27a9 ]

If any of the cipher schemes specified by the driver are invalid, bail
out and fail the registration rather than just warning.  Otherwise, we
might later crash when we try to use the invalid cipher scheme, e.g.
if the hdr_len is (significantly) less than the pn_offs + pn_len, we'd
have an out-of-bounds access in RX validation.

Fixes: 2475b1cc0d ("mac80211: add generic cipher scheme support")
Link: https://lore.kernel.org/r/20210408143149.38a3a13a1b19.I6b7f5790fa0958ed8049cf02ac2a535c61e9bc96@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-05-22 10:59:36 +02:00
..
6lowpan
6lowpan: Off by one handling ->nexthdr
2020-01-27 14:50:41 +01:00
9p
net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
2020-11-05 11:08:44 +01:00
802
…
8021q
net: vlan: avoid leaks on register_vlan_dev() failures
2021-01-17 14:04:19 +01:00
appletalk
appletalk: Fix skb allocation size in loopback case
2021-04-07 12:48:49 +02:00
atm
atm: fix a memory leak of vcc->user_back
2020-10-01 13:14:43 +02:00
ax25
AX.25: Prevent integer overflows in connect and sendmsg
2020-07-31 18:37:48 +02:00
batman-adv
batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
2021-04-14 08:22:33 +02:00
bluetooth
bluetooth: eliminate the potential race condition when removing the HCI controller
2021-05-22 10:59:24 +02:00
bpf
bpf/test_run: support cgroup local storage
2018-08-03 00:47:32 +02:00
bpfilter
signal/bpfilter: Fix bpfilter_kernl to use send_sig not force_sig
2020-01-27 14:50:51 +01:00
bridge
net: bridge: use switchdev for port flags set through sysfs too
2021-03-07 12:18:56 +01:00
caif
net: use skb_queue_empty_lockless() in poll() handlers
2019-11-10 11:27:48 +01:00
can
can: af_can: prevent potential access of uninitialized member in canfd_rcv()
2020-11-24 13:27:22 +01:00
ceph
libceph: clear con->out_msg on Policy::stateful_server faults
2020-11-05 11:08:53 +01:00
core
neighbour: Disregard DEAD dst in neigh_update
2021-04-28 13:16:48 +02:00
dcb
net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands
2021-01-23 15:49:56 +01:00
dccp
ipv6: weaken the v4mapped source check
2021-04-07 12:48:47 +02:00
decnet
net: add bool confirm_neigh parameter for dst_ops.update_pmtu
2020-01-04 19:13:37 +01:00
dns_resolver
KEYS: Don't write out to userspace while holding key semaphore
2020-04-23 10:30:24 +02:00
dsa
net: dsa: tag_mtk: fix 802.1ad VLAN egress
2021-03-20 10:38:35 +01:00
ethernet
net: add annotations on hh->hh_len lockless accesses
2020-01-09 10:19:09 +01:00
hsr
hsr: use netdev_err() instead of WARN_ONCE()
2021-05-22 10:59:24 +02:00
ieee802154
net: ieee802154: forbid monitor for add llsec seclevel
2021-04-28 13:16:49 +02:00
ife
…
ipv4
netfilter: x_tables: fix compat match/target pad out-of-bound write
2021-04-16 11:49:31 +02:00
ipv6
net: ip6_tunnel: Unregister catch-all devices
2021-04-28 13:16:51 +02:00
iucv
net/af_iucv: set correct sk_protocol for child sockets
2020-12-08 10:18:52 +01:00
kcm
kcm: switch order of device registration to fix a crash
2019-04-17 08:38:40 +02:00
key
af_key: relax availability checks for skb size calculation
2021-02-13 13:51:14 +01:00
l2tp
l2tp: remove skb_dst_set() from l2tp_xmit_skb()
2020-07-22 09:31:59 +02:00
l3mdev
…
lapb
net: lapb: Copy the skb before sending a packet
2021-02-10 09:21:06 +01:00
llc
net: silence data-races on sk_backlog.tail
2020-10-01 13:14:26 +02:00
mac80211
mac80211: bail out if cipher schemes are invalid
2021-05-22 10:59:36 +02:00
mac802154
net: mac802154: Fix general protection fault
2021-04-14 08:22:36 +02:00
mpls
net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0
2021-03-17 16:43:43 +01:00
ncsi
net/ncsi: Avoid channel_monitor hrtimer deadlock
2021-04-14 08:22:35 +02:00
netfilter
netfilter: nft_limit: avoid possible divide error in nft_limit_init
2021-04-28 13:16:50 +02:00
netlabel
cipso,calipso: resolve a number of problems with the DOI refcounts
2021-03-17 16:43:44 +01:00
netlink
genetlink: remove genl_bind
2020-07-22 09:31:58 +02:00
netrom
net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
2020-04-29 16:31:21 +02:00
nfc
net/nfc: fix use-after-free llcp_sock_bind/connect
2021-05-22 10:59:24 +02:00
nsh
nsh: set mac len based on inner packet
2018-07-12 16:55:29 -07:00
openvswitch
openvswitch: fix stack OOB read while fragmenting IPv4 packets
2021-05-22 10:59:20 +02:00
packet
net/packet: fix overflow in tpacket_rcv
2020-10-07 08:00:08 +02:00
phonet
net: use skb_queue_empty_lockless() in poll() handlers
2019-11-10 11:27:48 +01:00
psample
net: psample: fix skb_over_panic
2019-12-05 09:21:30 +01:00
qrtr
net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
2021-03-30 14:37:03 +02:00
rds
net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
2021-02-23 15:00:58 +01:00
rfkill
rfkill: Fix incorrect check to avoid NULL pointer dereference
2020-01-12 12:17:17 +01:00
rose
rose: Fix Null pointer dereference in rose_send_frame()
2020-12-08 10:18:52 +01:00
rxrpc
rxrpc: Fix deadlock around release of dst cached on udp tunnel
2021-02-10 09:21:06 +01:00
sched
net: sched: bump refcount for new action in ACT replace mode
2021-04-14 08:22:36 +02:00
sctp
net/sctp: fix race condition in sctp_destroy_sock
2021-04-28 13:16:48 +02:00
smc
net/smc: fix valid DMBE buffer sizes
2020-10-29 09:54:55 +01:00
strparser
net: strparser: partially revert "strparser: Call skb_unclone conditionally"
2019-05-16 19:41:27 +02:00
sunrpc
rpc: fix NULL dereference on kmalloc failure
2021-04-07 12:48:47 +02:00
switchdev
…
tipc
net:tipc: Fix a double free in tipc_sk_mcast_rcv
2021-04-14 08:22:35 +02:00
tls
net/tls: Protect from calling tls_dev_del for TLS RX twice
2020-12-08 10:18:52 +01:00
unix
skbuff: fix a data race in skb_queue_len()
2020-10-01 13:14:32 +02:00
vmw_vsock
selinux: vsock: Set SID for socket returned by accept()
2021-04-07 12:48:46 +02:00
wimax
wimax: remove blank lines at EOF
2018-07-24 14:10:42 -07:00
wireless
cfg80211: scan: drop entry from hidden_list on overflow
2021-05-22 10:59:25 +02:00
x25
net/x25: prevent a couple of overflows
2020-12-08 10:18:54 +01:00
xdp
xsk: Fix xsk_poll()'s return type
2020-12-30 11:25:44 +01:00
xfrm
net: xfrm: Localize sequence counter per network namespace
2021-04-14 08:22:34 +02:00
compat.c
net/compat: Add missing sock updates for SCM_RIGHTS
2020-08-21 11:05:32 +02:00
Kconfig
net: remove blank lines at end of file
2018-07-24 14:10:43 -07:00
Makefile
bpfilter: check compiler capability in Kconfig
2018-06-28 13:36:39 +09:00
socket.c
net: Set fput_needed iff FDPUT_FPUT is set
2020-08-19 08:15:03 +02:00
sysctl_net.c
…