shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-11 05:17:10 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
4.9.337-13
linux/drivers/staging/rtl8712
History
Dan Carpenter 7dce6b0ee7 staging: rtl8712: fix use after free bugs 
commit e230a4455a upstream.

_Read/Write_MACREG callbacks are NULL so the read/write_macreg_hdl()
functions don't do anything except free the "pcmd" pointer.  It
results in a use after free.  Delete them.

Fixes: 2865d42c78 ("staging: r8712u: Add the new driver to the mainline kernel")
Cc: stable <stable@kernel.org>
Reported-by: Zheng Wang <hackerzheng666@gmail.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/Yw4ASqkYcUhUfoY2@kili
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-09-15 12:39:44 +02:00
..
basic_types.h
staging: rtl8712: Fixed FSF address warning in basic_types.h
2016-03-28 07:30:36 -07:00
drv_types.h
staging: rtl8712: Fixed FSF address warning in drv_types.h
2016-03-28 07:30:36 -07:00
ethernet.h
staging: rtl8712: Fixed FSF address warning in ethernet.h
2016-03-28 07:30:36 -07:00
hal_init.c
rtl8712: Fixed alignment to match open parenthesis
2016-05-01 13:57:12 -07:00
ieee80211.c
staging: rtl8712: Fixed multiple parenthesis alignment warnings in ieee80211.c
2016-08-21 18:26:45 +02:00
ieee80211.h
staging: rtl8712u: Fix endian settings for structs describing network packets
2017-11-08 10:08:34 +01:00
Kconfig
…
Makefile
…
mlme_linux.c
staging: rtl8712: Fix possible buffer overrun
2018-12-13 09:20:29 +01:00
mlme_osdep.h
…
mp_custom_oid.h
…
os_intfs.c
staging: rtl8712: delete one space before if statement
2016-09-02 14:55:54 +02:00
osdep_intf.h
rtl8712: intf_priv: Replace semaphore lock with completion
2016-08-21 18:25:47 +02:00
osdep_service.h
rtl8712: pwrctrl_priv: Replace semaphore lock with mutex
2016-09-01 17:44:01 +02:00
recv_linux.c
staging: r8712u: Fix leak of skb
2016-08-21 18:28:49 +02:00
recv_osdep.h
…
rtl871x_cmd.c
staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd
2021-03-17 16:10:17 +01:00
rtl871x_cmd.h
staging: rtl8712: fix block comments
2016-09-13 14:51:53 +02:00
rtl871x_debug.h
…
rtl871x_eeprom.c
…
rtl871x_eeprom.h
…
rtl871x_event.h
…
rtl871x_ht.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_io.c
Staging: rtl8712: Clean up tests if NULL returned on failure
2016-03-11 22:09:09 -08:00
rtl871x_io.h
…
rtl871x_ioctl_linux.c
staging: rtl8712: unterminated string leads to read overflow
2021-03-17 16:10:16 +01:00
rtl871x_ioctl_rtl.c
…
rtl871x_ioctl_rtl.h
…
rtl871x_ioctl_set.c
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_ioctl_set.h
…
rtl871x_ioctl.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_led.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_mlme.c
staging: rtl8712: Fix possible buffer overrun
2018-12-13 09:20:29 +01:00
rtl871x_mlme.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_mp_ioctl.c
…
rtl871x_mp_ioctl.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_mp_phy_regdef.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_mp.c
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_mp.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_pwrctrl.c
staging: rtl8712: fix double lock bug in SetPSModeWorkItemCallback()
2016-09-16 10:05:13 +02:00
rtl871x_pwrctrl.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_recv.c
staging: rtl: fix possible NULL pointer dereference
2017-03-12 06:41:42 +01:00
rtl871x_recv.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_rf.h
…
rtl871x_security.c
…
rtl871x_security.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_sta_mgt.c
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl871x_wlan_sme.h
…
rtl871x_xmit.c
staging: r8712u: Fix Sparse warning in rtl871x_xmit.c
2017-11-08 10:08:37 +01:00
rtl871x_xmit.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl8712_bitdef.h
…
rtl8712_cmd.c
staging: rtl8712: fix use after free bugs
2022-09-15 12:39:44 +02:00
rtl8712_cmd.h
staging: rtl8712: uninitialized memory in read_bbreg_hdl()
2019-05-04 08:49:08 +02:00
rtl8712_cmdctrl_bitdef.h
…
rtl8712_cmdctrl_regdef.h
…
rtl8712_debugctrl_bitdef.h
…
rtl8712_debugctrl_regdef.h
…
rtl8712_edcasetting_bitdef.h
…
rtl8712_edcasetting_regdef.h
…
rtl8712_efuse.c
Staging: rtl8712: rtl8712_efuse: Use !x instead of x == NULL.
2016-09-20 13:37:59 +02:00
rtl8712_efuse.h
…
rtl8712_event.h
…
rtl8712_fifoctrl_bitdef.h
…
rtl8712_fifoctrl_regdef.h
…
rtl8712_gp_bitdef.h
…
rtl8712_gp_regdef.h
…
rtl8712_hal.h
…
rtl8712_interrupt_bitdef.h
…
rtl8712_io.c
…
rtl8712_led.c
staging: rtl8712: Change _LED_STATE enum in rtl871x driver to avoid conflicts with LED namespace
2016-09-28 11:36:45 +02:00
rtl8712_macsetting_bitdef.h
…
rtl8712_macsetting_regdef.h
…
rtl8712_powersave_bitdef.h
…
rtl8712_powersave_regdef.h
…
rtl8712_ratectrl_bitdef.h
…
rtl8712_ratectrl_regdef.h
…
rtl8712_recv.c
Fixes: 3d44a78f0d ("staging: rtl8712: Remove unnecessary 'else'")
2016-09-28 08:10:36 +02:00
rtl8712_recv.h
staging: rtl8712: fix block comments
2016-09-13 14:51:53 +02:00
rtl8712_regdef.h
…
rtl8712_security_bitdef.h
…
rtl8712_spec.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl8712_syscfg_bitdef.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
rtl8712_syscfg_regdef.h
…
rtl8712_timectrl_bitdef.h
…
rtl8712_timectrl_regdef.h
…
rtl8712_wmac_bitdef.h
…
rtl8712_wmac_regdef.h
…
rtl8712_xmit.c
Staging: rtl8712: rtl8712_xmit: Use !x instead of x == NULL
2016-09-20 13:38:00 +02:00
rtl8712_xmit.h
…
sta_info.h
…
TODO
staging: refresh TODO for rtl8712
2016-03-22 22:22:13 -04:00
usb_halinit.c
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
usb_intf.c
staging: rtl8712: fix uninit-value in r871xu_drv_init()
2022-06-14 16:52:40 +02:00
usb_ops_linux.c
staging: r8712u: fix control-message timeout
2021-11-12 13:18:02 +01:00
usb_ops.c
staging: rtl8712: Remove exceptional & on function name
2016-03-11 22:09:09 -08:00
usb_ops.h
…
usb_osintf.h
…
wifi.h
staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK
2020-06-11 09:22:22 +02:00
wlan_bssdef.h
staging: rtl8712: checkpatch cleanup: block comments using a trailing */
2016-09-12 11:43:52 +02:00
xmit_linux.c
staging: r8712u: Handle some false positives from kmemleak
2016-08-21 18:28:49 +02:00
xmit_osdep.h
…