Johannes Berg 30f754e9d9 mac80211: clear sequence/fragment number in QoS-null frames ...

commit 864a6040f3 upstream.

Avoid leaking data by sending uninitialized memory and setting an
invalid (non-zero) fragment number (the sequence number is ignored
anyway) by setting the seq_ctrl field to zero.

Fixes: 3f52b7e328 ("mac80211: mesh power save basics")
Fixes: ce662b44ce ("mac80211: send (QoS) Null if no buffered frames")
Reviewed-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-03-23 21:38:12 -07:00

..

aes_ccm.c

mac80211: use AES_BLOCK_SIZE

2011-07-08 11:11:24 -04:00

aes_ccm.h

mac80211: use AES_BLOCK_SIZE

2011-07-08 11:11:24 -04:00

aes_cmac.c

mac80211: include export.h in aes_cmac

2012-11-07 18:01:54 +01:00

aes_cmac.h

mac80211: fix CMAC races

2011-07-08 11:11:20 -04:00

agg-rx.c

mac80211: improve aggregation debug messages

2013-01-18 21:55:15 +01:00

agg-tx.c

mac80211: fix aggregation state with current drivers

2013-01-24 15:43:51 +01:00

cfg.c

mac80211: release the channel in error path in start_ap

2014-02-22 12:41:26 -08:00

cfg.h

…

chan.c

Merge remote-tracking branch 'wireless-next/master' into mac80211-next

2013-04-22 15:31:43 +02:00

debug.h

mac80211: mesh power save basics

2013-02-04 18:57:47 +01:00

debugfs_key.c

mac80211: move sdata debugfs dir to vif

2013-03-18 20:10:04 +01:00

debugfs_key.h

mac80211: support separate default keys

2010-12-13 15:23:29 -05:00

debugfs_netdev.c

mac80211: add beacon stats to debugfs

2013-04-08 09:16:54 +02:00

debugfs_netdev.h

mac80211: reduce reliance on netdev

2009-12-21 18:38:52 -05:00

debugfs_sta.c

mac80211: add beacon stats to debugfs

2013-04-08 09:16:54 +02:00

debugfs_sta.h

mac80211: RCU-ify STA info structure access

2008-03-06 15:30:46 -05:00

debugfs.c

mac80211: remove IEEE80211_HW_SCAN_WHILE_IDLE

2013-02-11 18:45:01 +01:00

debugfs.h

mac80211: use __printf attribute in debugfs

2012-10-18 09:01:57 +02:00

driver-ops.h

mac80211: pass queue bitmap to flush operation

2013-03-18 20:15:03 +01:00

event.c

cfg80211: use proper allocation flags

2009-07-10 15:01:49 -04:00

ht.c

mac80211: fix HT capability overrides for AP station

2013-03-06 16:36:02 +01:00

ibss.c

mac80211: add missing channel context release

2013-09-07 22:09:59 -07:00

ieee80211_i.h

mac80211: correctly close cancelled scans

2013-11-13 12:05:30 +09:00

iface.c

mac80211: close AP_VLAN interfaces before unregistering all

2013-07-25 14:07:31 -07:00

Kconfig

Merge tag 'driver-core-3.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2013-02-21 12:05:51 -08:00

key.c

mac80211: batch key free synchronize_net()

2013-03-11 15:16:42 +02:00

key.h

mac80211: batch key free synchronize_net()

2013-03-11 15:16:42 +02:00

led.c

leds: Rename led_brightness_set() to led_set_brightness()

2012-07-24 07:52:34 +08:00

led.h

mac80211: selective throughput LED trigger active

2010-12-22 14:33:37 -05:00

main.c

mac80211: adjust initial chandefs assignments in ieee80211_register_hw

2013-04-16 16:01:23 +02:00

Makefile

mac80211: mesh power save basics

2013-02-04 18:57:47 +01:00

mesh_hwmp.c

mac80211: parse VHT channel switch IEs

2013-04-16 15:29:45 +02:00

mesh_pathtbl.c

mac80211: return new mpath from mesh_path_add()

2013-04-08 09:16:59 +02:00

mesh_plink.c

mac80211: parse VHT channel switch IEs

2013-04-16 15:29:45 +02:00

mesh_ps.c

mac80211: clear sequence/fragment number in QoS-null frames

2014-03-23 21:38:12 -07:00

mesh_sync.c

mac80211: clean up mesh code

2013-02-15 15:46:37 +01:00

mesh.c

Merge remote-tracking branch 'wireless-next/master' into mac80211-next

2013-04-22 15:31:43 +02:00

mesh.h

mac80211: return new mpath from mesh_path_add()

2013-04-08 09:16:59 +02:00

michael.c

mac80211: remove ieee80211_get_hdr_info

2008-07-08 14:16:01 -04:00

michael.h

mac80211: remove ieee80211_get_hdr_info

2008-07-08 14:16:01 -04:00

mlme.c

mac80211: fix association to 20/40 MHz VHT networks

2014-03-23 21:38:11 -07:00

offchannel.c

Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next

2013-04-10 14:09:54 -04:00

pm.c

mac80211: fix monitor interface suspend crash regression

2013-08-11 18:35:22 -07:00

rate.c

mac80211: Fix rate control mask matching call

2013-06-12 09:12:43 +02:00

rate.h

mac80211: track number of spatial streams

2013-02-15 09:41:31 +01:00

rc80211_minstrel_debugfs.c

mac80211: cosmetics for minstrel_debugfs

2013-04-17 17:08:23 +02:00

rc80211_minstrel_ht_debugfs.c

mac80211/minstrel_ht: add support for using CCK rates

2013-02-13 10:56:33 +01:00

rc80211_minstrel_ht.c

mac80211: add a flag to indicate CCK support for HT clients

2013-09-07 22:09:59 -07:00

rc80211_minstrel_ht.h

mac80211/minstrel_ht: use the new rate control API

2013-04-22 16:16:41 +02:00

rc80211_minstrel.c

mac80211/minstrel: fix NULL pointer dereference issue

2013-08-11 18:35:22 -07:00

rc80211_minstrel.h

mac80211/minstrel: use the new rate control API

2013-04-22 16:16:41 +02:00

rc80211_pid_algo.c

net: fix assignment of 0/1 to bool variables.

2011-12-19 22:27:29 -05:00

rc80211_pid_debugfs.c

net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules

2011-10-31 19:30:30 -04:00

rc80211_pid.h

Fix common misspellings

2011-03-31 11:26:23 -03:00

rx.c

mac80211: don't attempt to reorder multicast frames

2013-12-20 07:45:09 -08:00

scan.c

mac80211: correctly close cancelled scans

2013-11-13 12:05:30 +09:00

spectmgmt.c

mac80211: Remove unnecessary OOM logging messages

2011-09-13 15:45:02 -04:00

sta_info.c

mac80211: clear sequence/fragment number in QoS-null frames

2014-03-23 21:38:12 -07:00

sta_info.h

mac80211: fix AP powersave TX vs. wakeup race

2014-03-23 21:38:11 -07:00

status.c

mac80211: update sta->last_rx on acked tx frames

2013-11-13 12:05:30 +09:00

tkip.c

mac80211: use just spin_lock() in ieee80211_get_tkip_p2k()

2013-05-16 22:38:06 +02:00

tkip.h

mac80211: fix TKIP races, make API easier to use

2011-07-08 11:11:19 -04:00

trace.c

mac80211: trace debug messages

2012-06-24 11:33:18 +02:00

trace.h

mac80211: support secondary channel offset in CSA

2013-04-16 15:29:44 +02:00

tx.c

mac80211: fix AP powersave TX vs. wakeup race

2014-03-23 21:38:11 -07:00

util.c

mac80211: fix crash if bitrate calculation goes wrong

2013-11-13 12:05:30 +09:00

vht.c

mac80211: restrict peer's VHT capabilities to own

2013-03-06 16:36:03 +01:00

wep.c

mac80211: fix network header location when adding encryption headers

2012-05-16 12:47:43 -04:00

wep.h

mac80211: move RX WEP weak IV counting

2012-03-13 14:54:16 -04:00

wme.c

mac80211: send control port protocol frames to the VO queue

2014-03-23 21:38:11 -07:00

wme.h

mac80211: save wmm_acm per sdata

2012-06-20 17:35:22 +02:00

wpa.c

mac80211: use spin_lock_bh() for TKIP lock

2013-02-15 09:41:13 +01:00

wpa.h

mac80211: fix tx->skb NULL pointer dereference

2012-01-16 15:01:16 -05:00