linux-mainline/net/wireless
Johannes Berg 6c7394197a nl80211: fix HT capability attribute validation
Since the NL80211_ATTR_HT_CAPABILITY attribute is
used as a struct, it needs a minimum, not maximum
length. Enforce that properly. Not doing so could
potentially lead to reading after the buffer.

Cc: stable@vger.kernel.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2011-11-07 13:19:13 -05:00
..
.gitignore
chan.c
core.c Merge branch 'master' of git://git.infradead.org/users/linville/wireless 2011-09-20 14:11:55 -04:00
core.h nl80211/cfg80211: Add support to disable CCK rate for management frame 2011-09-27 14:34:10 -04:00
db.txt
debugfs.c
debugfs.h
ethtool.c
ethtool.h
genregdb.awk
ibss.c
Kconfig
lib80211_crypt_ccmp.c wireless: Remove unnecessary OOM logging messages 2011-09-13 15:45:02 -04:00
lib80211_crypt_tkip.c wireless: Remove unnecessary OOM logging messages 2011-09-13 15:45:02 -04:00
lib80211_crypt_wep.c wireless: Remove unnecessary OOM logging messages 2011-09-13 15:45:02 -04:00
lib80211.c lib80211: remove exports for functions not called by other modules 2011-08-09 15:42:36 -04:00
Makefile
mesh.c {nl,cfg,mac}80211: let userspace make meshif mesh gate 2011-08-24 13:59:43 -04:00
mlme.c nl80211/cfg80211: Add support to disable CCK rate for management frame 2011-09-27 14:34:10 -04:00
nl80211.c nl80211: fix HT capability attribute validation 2011-11-07 13:19:13 -05:00
nl80211.h cfg80211/nl80211: Add PMKSA caching candidate event 2011-09-19 16:10:14 -04:00
radiotap.c
reg.c Merge branch 'master' of git://git.infradead.org/users/linville/wireless 2011-09-20 14:11:55 -04:00
reg.h cfg80211: hold reg_mutex when updating regulatory 2011-09-14 13:26:39 -04:00
regdb.h
scan.c cfg80211: add cfg80211_find_vendor_ie() function 2011-09-19 15:49:11 -04:00
sme.c wireless: Do not allow disabled channel in scan request 2011-09-20 14:43:48 -04:00
sysfs.c mac80211: fix suspend/resume races with unregister hw 2011-08-22 14:21:40 -04:00
sysfs.h
util.c mac80211: data path modification for TDLS peers 2011-09-30 15:57:09 -04:00
wext-compat.c cfg80211: remove unused wext handler exports 2011-08-08 14:26:29 -04:00
wext-compat.h cfg80211: remove unused wext handler exports 2011-08-08 14:26:29 -04:00
wext-core.c
wext-priv.c
wext-proc.c
wext-sme.c cfg80211: remove unused wext handler exports 2011-08-08 14:26:29 -04:00
wext-spy.c