Johannes Berg fedd9377dd wifi: mac80211: check S1G action frame size ...

[ Upstream commit 19e4a47ee7 ]

Before checking the action code, check that it even
exists in the frame.

Reported-by: syzbot+be9c824e6f269d608288@syzkaller.appspotmail.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-09-23 11:09:56 +02:00

..

aead_api.c

…

aead_api.h

…

aes_ccm.h

…

aes_cmac.c

…

aes_cmac.h

…

aes_gcm.h

…

aes_gmac.c

…

aes_gmac.h

…

agg-rx.c

mac80211: fix memory leaks with element parsing

2022-10-15 07:59:05 +02:00

agg-tx.c

wifi: mac80211: sdata can be NULL during AMPDU start

2023-01-24 07:22:42 +01:00

airtime.c

wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration

2022-12-08 11:28:40 +01:00

cfg.c

wifi: mac80211: allow bw change during channel switch in mesh

2022-10-26 12:34:39 +02:00

chan.c

wifi: mac80211: simplify chanctx allocation

2023-06-09 10:32:25 +02:00

debug.h

…

debugfs_key.c

…

debugfs_key.h

…

debugfs_netdev.c

…

debugfs_netdev.h

…

debugfs_sta.c

…

debugfs_sta.h

…

debugfs.c

…

debugfs.h

…

driver-ops.c

wifi: mac80211: sdata can be NULL during AMPDU start

2023-01-24 07:22:42 +01:00

driver-ops.h

…

ethtool.c

…

fils_aead.c

…

fils_aead.h

…

he.c

…

ht.c

…

ibss.c

mac80211: fix memory leaks with element parsing

2022-10-15 07:59:05 +02:00

ieee80211_i.h

wifi: mac80211: fix MBSSID parsing use-after-free

2022-10-15 07:59:05 +02:00

iface.c

Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"

2023-01-24 07:22:49 +01:00

Kconfig

…

key.c

…

key.h

…

led.c

…

led.h

…

main.c

wifi: mac80211: fix memory free error when registering wiphy fail

2022-12-02 17:41:01 +01:00

Makefile

…

mesh_hwmp.c

mac80211: always allocate struct ieee802_11_elems

2022-10-15 07:59:05 +02:00

mesh_pathtbl.c

wifi: mac80211: Fix ack frame idr leak when mesh has no route

2022-12-02 17:41:01 +01:00

mesh_plink.c

mac80211: always allocate struct ieee802_11_elems

2022-10-15 07:59:05 +02:00

mesh_ps.c

…

mesh_sync.c

mac80211: mesh: clean up rx_bcn_presp API

2022-10-15 07:59:04 +02:00

mesh.c

mac80211: always allocate struct ieee802_11_elems

2022-10-15 07:59:05 +02:00

mesh.h

…

michael.c

…

michael.h

…

mlme.c

mac80211: fix memory leaks with element parsing

2022-10-15 07:59:05 +02:00

ocb.c

…

offchannel.c

…

pm.c

…

rate.c

…

rate.h

…

rc80211_minstrel_ht_debugfs.c

…

rc80211_minstrel_ht.c

mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs output)

2022-06-09 10:22:31 +02:00

rc80211_minstrel_ht.h

…

rx.c

wifi: mac80211: check S1G action frame size

2023-09-23 11:09:56 +02:00

s1g.c

wifi: mac80211: Set TWT Information Frame Disabled bit as 1

2022-11-16 09:58:14 +01:00

scan.c

mac80211: always allocate struct ieee802_11_elems

2022-10-15 07:59:05 +02:00

spectmgmt.c

…

sta_info.c

wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta

2023-04-13 16:48:17 +02:00

sta_info.h

…

status.c

…

tdls.c

mac80211: always allocate struct ieee802_11_elems

2022-10-15 07:59:05 +02:00

tkip.c

…

tkip.h

…

trace_msg.h

…

trace.c

…

trace.h

wifi: mac80211: fix min center freq offset tracing

2023-05-24 17:36:51 +01:00

tx.c

wifi: mac80211: fix regression with non-QoS drivers

2022-10-05 10:39:43 +02:00

util.c

wifi: mac80211: fix MBSSID parsing use-after-free

2022-10-15 07:59:05 +02:00

vht.c

…

wep.c

…

wep.h

…

wme.c

wifi: mac80211: fix qos on mesh interfaces

2023-03-30 12:47:58 +02:00

wme.h

…

wpa.c

…

wpa.h

…