Kees Cook 24bf1d10a0 wifi: nl80211: Set num_sub_specs before looping through sub_specs ...

[ Upstream commit 2ed9a9fc99 ]

The processing of the struct cfg80211_sar_specs::sub_specs flexible
array requires its counter, num_sub_specs, to be assigned before the
loop in nl80211_set_sar_specs(). Leave the final assignment after the
loop in place in case fewer ended up in the array.

Fixes: aa4ec06c45 ("wifi: cfg80211: use __counted_by where appropriate")
Signed-off-by: Kees Cook <kees@kernel.org>
Reviewed-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Link: https://patch.msgid.link/20250721183125.work.183-kees@kernel.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-08-15 12:13:46 +02:00

..

certs

…

tests

wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap()

2025-02-08 09:57:02 +01:00

.gitignore

…

ap.c

…

chan.c

wifi: cfg80211: allow IR in 20 MHz configurations

2025-05-29 11:02:23 +02:00

core.c

wifi: cfg80211: init wiphy_work before allocating rfkill fails

2025-06-27 11:11:39 +01:00

core.h

wifi: cfg80211: skip indicating signal for per-STA profile BSSs

2024-09-06 12:56:33 +02:00

debugfs.c

…

debugfs.h

…

ethtool.c

…

ibss.c

wifi: cfg80211: move DFS related members to links[] in wireless_dev

2024-09-06 13:01:05 +02:00

Kconfig

…

lib80211_crypt_ccmp.c

…

lib80211_crypt_tkip.c

…

lib80211_crypt_wep.c

…

lib80211.c

…

Makefile

…

mesh.c

wifi: cfg80211: move DFS related members to links[] in wireless_dev

2024-09-06 13:01:05 +02:00

mlme.c

wifi: cfg80211: Remove the Medium Synchronization Delay validity check

2024-12-05 14:01:55 +01:00

nl80211.c

wifi: nl80211: Set num_sub_specs before looping through sub_specs

2025-08-15 12:13:46 +02:00

nl80211.h

…

ocb.c

…

of.c

…

pmsr.c

…

radiotap.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

rdev-ops.h

wifi: cfg80211: handle DFS per link

2024-09-06 13:01:05 +02:00

reg.c

wifi: cfg80211: allow IR in 20 MHz configurations

2025-05-29 11:02:23 +02:00

reg.h

…

scan.c

wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements

2025-06-19 15:32:19 +02:00

sme.c

wifi: cfg80211: sme: init n_channels before channels[] access

2024-12-19 18:13:12 +01:00

sysfs.c

…

sysfs.h

…

trace.c

…

trace.h

wifi: cfg80211: handle DFS per link

2024-09-06 13:01:05 +02:00

util.c

wifi: prevent A-MSDU attacks in mesh networks

2025-07-17 18:37:10 +02:00

wext-compat.c

…

wext-compat.h

…

wext-core.c

…

wext-priv.c

…

wext-proc.c

…

wext-sme.c

…

wext-spy.c

…