Will Deacon a61ac39156 mac80211: Reject malformed SSID elements ...

commit 4152561f5d upstream.

Although this shouldn't occur in practice, it's a good idea to bounds
check the length field of the SSID element prior to using it for things
like allocations or memcpy operations.

Cc: <stable@vger.kernel.org>
Cc: Kees Cook <keescook@chromium.org>
Reported-by: Nicolas Waisman <nico@semmle.com>
Signed-off-by: Will Deacon <will@kernel.org>
Link: https://lore.kernel.org/r/20191004095132.15777-1-will@kernel.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-10-29 09:15:22 +01:00

..

aes_ccm.c

mac80211: move struct aead_req off the stack

2016-10-17 16:14:04 +02:00

aes_ccm.h

mac80211: move struct aead_req off the stack

2016-10-17 16:14:04 +02:00

aes_cmac.c

mac80211: remove ieee80211_aes_cmac_calculate_k1_k2()

2015-08-13 11:31:45 +02:00

aes_cmac.h

mac80111: Add BIP-CMAC-256 cipher

2015-01-27 11:09:13 +01:00

aes_gcm.c

mac80211: move struct aead_req off the stack

2016-10-17 16:14:04 +02:00

aes_gcm.h

mac80211: move struct aead_req off the stack

2016-10-17 16:14:04 +02:00

aes_gmac.c

mac80211: move struct aead_req off the stack

2016-10-17 16:14:04 +02:00

aes_gmac.h

mac80211: move struct aead_req off the stack

2016-10-17 16:14:04 +02:00

agg-rx.c

mac80211: don't reorder frames with SN smaller than SSN

2017-03-15 10:02:47 +08:00

agg-tx.c

mac80211: fix TX aggregation start/stop callback race

2018-11-10 07:42:47 -08:00

cfg.c

mac80211: fix possible sta leak

2019-09-06 10:19:52 +02:00

chan.c

mac80211: calculate min channel width correctly

2017-12-09 22:01:51 +01:00

debug.h

mac80211: 802.11p OCB mode support

2014-11-04 13:18:21 +01:00

debugfs_key.c

mac80211: move TKIP TX IVs to public part of key struct

2016-02-24 09:04:38 +01:00

debugfs_key.h

mac80211: support separate default keys

2010-12-13 15:23:29 -05:00

debugfs_netdev.c

mac80211: fix txq null pointer dereference

2019-10-29 09:15:03 +01:00

debugfs_netdev.h

mac80211: fix some missing includes

2014-04-09 14:49:43 +02:00

debugfs_sta.c

mac80211: fix tid_agg_rx NULL dereference

2017-01-12 11:39:23 +01:00

debugfs_sta.h

mac80211: RCU-ify STA info structure access

2008-03-06 15:30:46 -05:00

debugfs.c

mac80211: Export fq memory limit information in debugfs

2016-09-30 13:29:31 +02:00

debugfs.h

mac80211: fix some missing includes

2014-04-09 14:49:43 +02:00

driver-ops.c

mac80211: don't warn about CW params when not using them

2019-08-25 10:51:23 +02:00

driver-ops.h

mac80211: do not call driver wake_tx_queue op during reconfig

2019-04-27 09:34:45 +02:00

ethtool.c

mac80211: move station statistics into sub-structs

2015-10-21 10:08:22 +02:00

ht.c

mac80211: fix TX aggregation start/stop callback race

2018-11-10 07:42:47 -08:00

ibss.c

mac80211: shorten the IBSS debug messages

2018-10-10 08:53:20 +02:00

ieee80211_i.h

mac80211: handle deauthentication/disassociation from TDLS peer

2019-10-05 12:30:09 +02:00

iface.c

mac80211: Fix kernel panic due to use of txq after free

2019-05-25 18:26:55 +02:00

Kconfig

mac80211: use DECLARE_EWMA

2015-08-14 17:49:53 +02:00

key.c

mac80211: restrict delayed tailroom needed decrement

2018-09-26 08:36:33 +02:00

key.h

mac80211: move TKIP TX IVs to public part of key struct

2016-02-24 09:04:38 +01:00

led.c

mac80211: fix throughput LED trigger

2015-05-11 19:16:04 +02:00

led.h

mac80211: make LED triggering depend on activation

2015-05-05 14:21:56 +02:00

main.c

mac80211: fix a race between restart and CSA flows

2018-10-10 08:53:19 +02:00

Makefile

mac80211: remove event.c

2015-10-14 18:40:26 +02:00

mesh_hwmp.c

mac80211: mesh: fix HWMP sequence numbering to follow standard

2018-10-10 08:53:18 +02:00

mesh_pathtbl.c

mac80211: fix unaligned access in mesh table hash function

2019-05-16 19:43:41 +02:00

mesh_plink.c

mac80211: Fix possible sband related NULL pointer de-reference

2018-03-24 11:00:17 +01:00

mesh_ps.c

mac80211: mesh: separate plid and aid concepts

2015-07-17 15:47:11 +02:00

mesh_sync.c

mac80211: Remove invalid flag operations in mesh TSF synchronization

2017-11-30 08:39:13 +00:00

mesh.c

mac80211: free peer keys before vif down in mesh

2019-07-21 09:05:52 +02:00

mesh.h

mac80211: mesh: fix cleanup for mesh pathtable

2016-04-05 21:34:53 +02:00

michael.c

mac80211: remove ieee80211_get_hdr_info

2008-07-08 14:16:01 -04:00

michael.h

mac80211: fix some missing includes

2014-04-09 14:49:43 +02:00

mlme.c

mac80211: Reject malformed SSID elements

2019-10-29 09:15:22 +01:00

ocb.c

mac80211: remove rx_stats.last_rx update after sta alloc

2016-04-06 13:18:15 +02:00

offchannel.c

mac80211: flush hw_roc_start work before cancelling the ROC

2017-10-05 09:43:58 +02:00

pm.c

mac80211: flush delayed work when entering suspend

2017-03-15 10:02:47 +08:00

rate.c

mac80211: Fix clang warning about constant operand in logical operation

2018-04-08 12:12:46 +02:00

rate.h

mac80211: remove sta_info debugfs sub-struct

2016-04-05 11:59:05 +02:00

rc80211_minstrel_debugfs.c

mac80211: minstrel[_ht]: remove non-ascii debugfs characters

2015-09-29 15:56:47 +02:00

rc80211_minstrel_ht_debugfs.c

mac80211: minstrel[_ht]: remove non-ascii debugfs characters

2015-09-29 15:56:47 +02:00

rc80211_minstrel_ht.c

cfg80211: remove enum ieee80211_band

2016-04-12 15:56:15 +02:00

rc80211_minstrel_ht.h

mac80211: add max lossless throughput per rate

2015-04-01 20:44:32 +02:00

rc80211_minstrel.c

cfg80211: remove enum ieee80211_band

2016-04-12 15:56:15 +02:00

rc80211_minstrel.h

mac80211: add standard deviation to Minstrel stats

2015-04-01 20:44:33 +02:00

rx.c

mac80211: drop robust management frames from unknown TA

2019-07-10 09:55:35 +02:00

scan.c

mac80211: fix scan completed tracing

2016-09-15 16:46:16 +02:00

spectmgmt.c

mac80211: Do not disconnect on invalid operating class

2018-05-30 07:50:28 +02:00

sta_info.c

mac80211: fix calling sleeping function in atomic context

2018-05-30 07:50:28 +02:00

sta_info.h

mac80211: fix TX aggregation start/stop callback race

2018-11-10 07:42:47 -08:00

status.c

mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext

2018-12-13 09:20:30 +01:00

tdls.c

mac80211: handle deauthentication/disassociation from TDLS peer

2019-10-05 12:30:09 +02:00

tkip.c

mac80211: move TKIP TX IVs to public part of key struct

2016-02-24 09:04:38 +01:00

tkip.h

mac80211: move TKIP TX IVs to public part of key struct

2016-02-24 09:04:38 +01:00

trace_msg.h

mac80211: Move message tracepoints to their own header

2015-04-07 12:32:09 -04:00

trace.c

mac80211: Move message tracepoints to their own header

2015-04-07 12:32:09 -04:00

trace.h

mac80211: add offset_tsf driver op and use it for mesh

2016-09-30 13:45:44 +02:00

tx.c

mac80211: ensure that mgmt tx skbs have tailroom for encryption

2019-02-15 08:07:38 +01:00

util.c

mac80211: add stations tied to AP_VLANs during hw reconfig

2018-09-05 09:19:59 +02:00

vht.c

mac80211: recalculate min channel width on VHT opmode changes

2017-07-05 14:40:24 +02:00

wep.c

mac80211: Add RX flag to indicate ICV stripped

2018-01-17 09:38:49 +01:00

wep.h

mac80211: move RX WEP weak IV counting

2012-03-13 14:54:16 -04:00

wme.c

mac80211: synchronously reserve TID per station

2014-11-19 18:45:36 +01:00

wme.h

mac80211: add WMM admission control support

2014-10-22 10:42:09 +02:00

wpa.c

mac80211: Do not use stack memory with scatterlist for GMAC

2019-07-10 09:55:35 +02:00

wpa.h

mac80111: Add BIP-GMAC-128 and BIP-GMAC-256 ciphers

2015-01-27 11:10:13 +01:00