linux/drivers/net/wireless
Qing Xu 3a9b153c55 mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
mwifiex_ret_wmm_get_status() calls memcpy() without checking the
destination size.Since the source is given from remote AP which
contains illegal wmm elements , this may trigger a heap buffer
overflow.
Fix it by putting the length check before calling memcpy().

Signed-off-by: Qing Xu <m1s5p6688@gmail.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
2020-01-27 16:34:33 +02:00
..
admtek adm80211: remove set but not used variables 'mem_addr' and 'io_addr' 2019-10-24 08:48:00 +03:00
ath wcn36xx: fix spelling mistake "to" -> "too" 2020-01-26 16:40:19 +02:00
atmel at76c50x-usb: fix endpoint debug message 2019-12-18 21:06:02 +02:00
broadcom brcmfmac: Remove always false 'idx < 0' statement 2020-01-26 17:43:28 +02:00
cisco airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE 2020-01-23 11:01:13 +01:00
intel wireless-drivers-next patches for v5.6 2020-01-27 11:25:36 +01:00
intersil hostap: Adjust indentation in prism2_hostapd_add_sta 2020-01-26 17:36:17 +02:00
marvell mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() 2020-01-27 16:34:33 +02:00
mediatek mt76: Off by one in mt76_calc_rx_airtime() 2019-12-18 20:50:40 +02:00
quantenna qtnfmac: add support for TWT responder and spatial reuse 2020-01-26 17:44:02 +02:00
ralink rt2x00usb: Fix a warning message in 'rt2x00usb_watchdog_tx_dma()' 2019-12-18 20:58:48 +02:00
realtek rtlwifi: btcoex: fix spelling mistake "initilized" -> "initialized" 2020-01-26 17:47:54 +02:00
rsi rsi_91x_usb: fix interface sanity check 2019-12-18 21:06:06 +02:00
st cw1200: use true,false for bool variable 2020-01-26 17:40:43 +02:00
ti wlcore: mesh: Add support for RX Broadcast Key 2020-01-26 17:33:40 +02:00
zydas wireless-drivers-next patches for v5.6 2019-12-20 21:55:00 -08:00
Kconfig
mac80211_hwsim.c mac80211_hwsim: use DEFINE_DEBUGFS_ATTRIBUTE to define debugfs fops 2019-11-08 10:17:33 +01:00
mac80211_hwsim.h
Makefile
ray_cs.c
ray_cs.h
rayctl.h
rndis_wlan.c
virt_wifi.c virt_wifi: fix use-after-free in virt_wifi_newlink() 2019-11-22 13:36:25 +01:00
wl3501_cs.c netdev: pass the stuck queue to the timeout handler 2019-12-12 21:38:57 -08:00
wl3501.h