shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-03 17:51:57 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
v3.0.18
linux/net/mac80211
History
Stanislaw Gruszka b9e11747e1 mac80211: fix rx->key NULL pointer dereference in promiscuous mode 
commit 1140afa862 upstream.

Since:

commit 816c04fe7e
Author: Christian Lamparter <chunkeey@googlemail.com>
Date:   Sat Apr 30 15:24:30 2011 +0200

    mac80211: consolidate MIC failure report handling

is possible to that we dereference rx->key == NULL when driver set
RX_FLAG_MMIC_STRIPPED and not RX_FLAG_IV_STRIPPED and we are in
promiscuous mode. This happen with rt73usb and rt61pci at least.

Before the commit we always check rx->key against NULL, so I assume
fix should be done in mac80211 (also mic_fail path has similar check).

References:
https://bugzilla.redhat.com/show_bug.cgi?id=769766
http://rt2x00.serialmonkey.com/pipermail/users_rt2x00.serialmonkey.com/2012-January/004395.html

Reported-by: Stuart D Gathman <stuart@gathman.org>
Reported-by: Kai Wohlfahrt <kai.scorpio@gmail.com>
Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
2012-01-25 17:24:43 -08:00
..
aes_ccm.c
mac80211: Fix warnings due to -Wunused-but-set-variable
2011-04-26 15:50:31 -04:00
aes_ccm.h
mac80211: pass scratch buffer directly, remove additional pointers
2008-07-08 14:16:02 -04:00
aes_cmac.c
mac80211: Remove redundant checks for NULL before calls to crypto_free_cipher()
2010-11-15 13:26:11 -05:00
aes_cmac.h
mac80211: 802.11w - Add BIP (AES-128-CMAC)
2009-01-29 16:00:02 -05:00
agg-rx.c
mac80211: sparse RCU annotations
2011-05-16 14:10:41 -04:00
agg-tx.c
mac80211: fix another race in aggregation start
2012-01-06 14:13:48 -08:00
cfg.c
mac80211: fix offchannel TX cookie matching
2011-11-11 09:35:51 -08:00
cfg.h
[MAC80211]: rename ieee80211_cfg.h to cfg.h
2007-10-10 16:52:34 -07:00
chan.c
mac80211: fix channel type recalculation with HT and non-HT interfaces
2011-03-14 14:46:58 -04:00
debugfs_key.c
mac80211: sparse RCU annotations
2011-05-16 14:10:41 -04:00
debugfs_key.h
mac80211: support separate default keys
2010-12-13 15:23:29 -05:00
debugfs_netdev.c
mac80211: fix SMPS debugfs locking
2011-04-20 16:05:59 -04:00
debugfs_netdev.h
mac80211: reduce reliance on netdev
2009-12-21 18:38:52 -05:00
debugfs_sta.c
mac80211: fix debugfs printk format warning
2011-04-19 15:38:03 -04:00
debugfs_sta.h
mac80211: RCU-ify STA info structure access
2008-03-06 15:30:46 -05:00
debugfs.c
mac80211: add basic support for WoWLAN
2011-05-05 14:59:20 -04:00
debugfs.h
mac80211: refactor debugfs function generation code
2010-11-15 13:24:48 -05:00
driver-ops.h
mac80211: add support for HW scheduled scan
2011-05-11 15:12:27 -04:00
driver-trace.c
mac80211: fix sparse warnings/errors
2009-08-04 16:43:25 -04:00
driver-trace.h
mac80211: add support for HW scheduled scan
2011-05-11 15:12:27 -04:00
event.c
cfg80211: use proper allocation flags
2009-07-10 15:01:49 -04:00
ht.c
mac80211: sparse RCU annotations
2011-05-16 14:10:41 -04:00
ibss.c
mac80211: fix IBSS teardown race
2011-06-08 14:19:05 -04:00
ieee80211_i.h
mac80211: disable powersave for broken APs
2011-11-11 09:37:13 -08:00
iface.c
net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared
2011-08-15 18:31:38 -07:00
Kconfig
mac80211: remove the dependency on crypto_blkcipher
2011-04-04 16:20:00 -04:00
key.c
Revert "mac80211: Skip tailroom reservation for full HW-crypto devices"
2011-06-06 15:23:53 -04:00
key.h
mac80211: sparse RCU annotations
2011-05-16 14:10:41 -04:00
led.c
mac80211: remove stray extern
2011-01-05 16:07:12 -05:00
led.h
mac80211: selective throughput LED trigger active
2010-12-22 14:33:37 -05:00
main.c
mac80211: add missing rcu_barrier
2011-05-16 14:25:29 -04:00
Makefile
mac80211: add the minstrel_ht rate control algorithm
2010-06-02 16:12:59 -04:00
mesh_hwmp.c
mac80211: sparse RCU annotations
2011-05-16 14:10:41 -04:00
mesh_pathtbl.c
Merge ssh://master.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 into for-davem
2011-05-24 16:47:54 -04:00
mesh_plink.c
nl80211: Move peer link state definition to nl80211
2011-05-16 14:10:49 -04:00
mesh.c
mac80211: mesh: move some code to make it static
2011-05-12 14:10:55 -04:00
mesh.h
mac80211: annotate and fix RCU in mesh code
2011-05-16 14:25:29 -04:00
michael.c
mac80211: remove ieee80211_get_hdr_info
2008-07-08 14:16:01 -04:00
michael.h
mac80211: remove ieee80211_get_hdr_info
2008-07-08 14:16:01 -04:00
mlme.c
mac80211: disable powersave for broken APs
2011-11-11 09:37:13 -08:00
offchannel.c
mac80211: Optimize scans on current operating channel.
2011-02-04 16:30:32 -05:00
pm.c
mac80211: add basic support for WoWLAN
2011-05-05 14:59:20 -04:00
rate.c
cfg80211/mac80211: improve ad-hoc multicast rate handling
2010-11-24 16:19:35 -05:00
rate.h
mac80211: add the minstrel_ht rate control algorithm
2010-06-02 16:12:59 -04:00
rc80211_minstrel_debugfs.c
llseek: automatically add .llseek fop
2010-10-15 15:53:27 +02:00
rc80211_minstrel_ht_debugfs.c
mac80211: disallow seeks in minstrel debug code
2010-09-16 10:33:17 +02:00
rc80211_minstrel_ht.c
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 into for-davem
2011-05-16 19:32:19 -04:00
rc80211_minstrel_ht.h
minstrel_ht: move minstrel_mcs_groups declaration to header file
2010-06-24 15:42:18 -04:00
rc80211_minstrel.c
mac80211: fix contention time computation in minstrel, minstrel_ht
2011-05-12 14:10:48 -04:00
rc80211_minstrel.h
minstrel: make the rate control ops reusable from another rc implementation
2010-03-10 17:44:23 -05:00
rc80211_pid_algo.c
include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h
2010-03-30 22:02:32 +09:00
rc80211_pid_debugfs.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6
2010-10-23 11:47:02 -07:00
rc80211_pid.h
Fix common misspellings
2011-03-31 11:26:23 -03:00
rx.c
mac80211: fix NULL dereference in radiotap code
2011-11-26 09:09:54 -08:00
scan.c
mac80211: fix ie memory allocation for scheduled scans
2011-07-07 13:06:08 -04:00
spectmgmt.c
mac80211: reduce reliance on netdev
2009-12-21 18:38:52 -05:00
sta_info.c
mac80211: fix missing sta_lock in __sta_info_destroy
2011-10-03 11:40:28 -07:00
sta_info.h
nl80211: Move peer link state definition to nl80211
2011-05-16 14:10:49 -04:00
status.c
mac80211: fix offchannel TX cookie matching
2011-11-11 09:35:51 -08:00
tkip.c
mac80211: remove the dependency on crypto_blkcipher
2011-04-04 16:20:00 -04:00
tkip.h
mac80211: remove the dependency on crypto_blkcipher
2011-04-04 16:20:00 -04:00
tx.c
Revert "mac80211: Skip tailroom reservation for full HW-crypto devices"
2011-06-06 15:23:53 -04:00
util.c
mac80211: fix bug in ieee80211_build_probe_req
2011-11-26 09:09:54 -08:00
wep.c
mac80211: remove the dependency on crypto_blkcipher
2011-04-04 16:20:00 -04:00
wep.h
mac80211: remove the dependency on crypto_blkcipher
2011-04-04 16:20:00 -04:00
wme.c
mac80211: cleanup select_queue
2010-12-22 15:44:22 -05:00
wme.h
mac80211: fix skb buffering issue
2010-01-05 16:21:40 -05:00
work.c
mac80211: config hw when going back on-channel
2011-11-11 09:37:12 -08:00
wpa.c
mac80211: fix rx->key NULL pointer dereference in promiscuous mode
2012-01-25 17:24:43 -08:00
wpa.h
mac80211: 802.11w - Add BIP (AES-128-CMAC)
2009-01-29 16:00:02 -05:00