Johannes Berg daebcf9871 mac80211: fix IBSS presp allocation size ...

commit f1f3e9e2a5 upstream.

When VHT IBSS support was added, the size of the extra elements
wasn't considered in ieee80211_ibss_build_presp(), which makes
it possible that it would overrun the allocated buffer. Fix it
by allocating the necessary space.

Fixes: abcff6ef01 ("mac80211: add VHT support for IBSS")
Reported-by: Shaul Triebitz <shaul.triebitz@intel.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-06-26 07:13:09 +02:00

..

aes_ccm.c

…

aes_ccm.h

…

aes_cmac.c

…

aes_cmac.h

…

aes_gcm.c

…

aes_gcm.h

…

aes_gmac.c

…

aes_gmac.h

…

agg-rx.c

mac80211: RX BA support for sta max_rx_aggregation_subframes

2017-05-20 14:27:03 +02:00

agg-tx.c

mac80211: pass block ack session timeout to to driver

2017-05-20 14:27:03 +02:00

cfg.c

mac80211: fix purging multicast PS buffer queue

2016-09-07 08:32:41 +02:00

chan.c

…

debug.h

…

debugfs_key.c

…

debugfs_key.h

…

debugfs_netdev.c

…

debugfs_netdev.h

…

debugfs_sta.c

…

debugfs_sta.h

…

debugfs.c

…

debugfs.h

…

driver-ops.c

mac80211: pass block ack session timeout to to driver

2017-05-20 14:27:03 +02:00

driver-ops.h

mac80211: pass block ack session timeout to to driver

2017-05-20 14:27:03 +02:00

ethtool.c

…

ht.c

…

ibss.c

mac80211: fix IBSS presp allocation size

2017-06-26 07:13:09 +02:00

ieee80211_i.h

mac80211: check PN correctly for GCMP-encrypted fragmented MPDUs

2016-03-16 08:43:00 -07:00

iface.c

mac80211: fix statistics leak if dev_alloc_name() fails

2016-05-11 11:21:13 +02:00

Kconfig

…

key.c

…

key.h

…

led.c

…

led.h

…

main.c

…

Makefile

…

mesh_hwmp.c

…

mesh_pathtbl.c

…

mesh_plink.c

…

mesh_ps.c

…

mesh_sync.c

…

mesh.c

mac80211: Fix adding of mesh vendor IEs

2017-02-14 15:22:51 -08:00

mesh.h

…

michael.c

…

michael.h

…

mlme.c

cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts

2017-01-09 08:07:42 +01:00

ocb.c

…

offchannel.c

…

pm.c

mac80211: flush delayed work when entering suspend

2017-03-15 09:57:14 +08:00

rate.c

…

rate.h

…

rc80211_minstrel_debugfs.c

…

rc80211_minstrel_ht_debugfs.c

…

rc80211_minstrel_ht.c

mac80211: minstrel_ht: fix a logic error in RTS/CTS handling

2016-03-16 08:43:00 -07:00

rc80211_minstrel_ht.h

…

rc80211_minstrel.c

mac80211: minstrel: Change expected throughput unit back to Kbps

2016-03-16 08:42:59 -07:00

rc80211_minstrel.h

…

rx.c

mac80211: don't look at the PM bit of BAR frames

2017-06-26 07:13:08 +02:00

scan.c

…

spectmgmt.c

…

sta_info.c

mac80211: RX BA support for sta max_rx_aggregation_subframes

2017-05-20 14:27:03 +02:00

sta_info.h

mac80211: fix fast_tx header alignment

2016-07-27 09:47:27 -07:00

status.c

…

tdls.c

…

tkip.c

…

tkip.h

…

trace_msg.h

…

trace.c

…

trace.h

mac80211: pass block ack session timeout to to driver

2017-05-20 14:27:03 +02:00

tx.c

mac80211: initialize fast-xmit 'info' later

2017-01-12 11:22:43 +01:00

util.c

…

vht.c

…

wep.c

…

wep.h

…

wme.c

…

wme.h

…

wpa.c

mac80211/wpa: use constant time memory comparison for MACs

2017-06-26 07:13:09 +02:00

wpa.h

…