TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v4.9.197
twx-linux/net
T
History
Johannes Berg a873afd7d8 nl80211: validate beacon head 
commit f88eb7c0d0 upstream.

We currently don't validate the beacon head, i.e. the header,
fixed part and elements that are to go in front of the TIM
element. This means that the variable elements there can be
malformed, e.g. have a length exceeding the buffer size, but
most downstream code from this assumes that this has already
been checked.

Add the necessary checks to the netlink policy.

Cc: stable@vger.kernel.org
Fixes: ed1b6cc7f8 ("cfg80211/nl80211: add beacon settings")
Link: https://lore.kernel.org/r/1569009255-I7ac7fbe9436e9d8733439eab8acbbd35e55c74ef@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-10-17 13:42:23 -07:00
..
6lowpan
…
9p
9p/virtio: Add cleanup path in p9_virtio_init
2019-08-04 09:33:28 +02:00
802
…
8021q
…
appletalk
appletalk: enforce CAP_NET_RAW for raw sockets
2019-10-05 12:30:15 +02:00
atm
…
ax25
ax25: enforce CAP_NET_RAW for raw sockets
2019-10-05 12:30:15 +02:00
batman-adv
batman-adv: Only read OGM2 tvlv_len after buffer len check
2019-09-21 07:14:14 +02:00
bluetooth
Revert "Bluetooth: validate BLE connection interval updates"
2019-10-05 12:30:05 +02:00
bridge
bridge/mdb: remove wrong use of NLM_F_MULTI
2019-09-21 07:14:01 +02:00
caif
…
can
can: purge socket error queue on sock destruct
2019-07-10 09:55:33 +02:00
ceph
libceph: use kbasename() and kill ceph_file_part()
2019-08-11 12:22:15 +02:00
core
net: Unpublish sk from sk_reuseport_cb before call_rcu
2019-10-07 18:53:21 +02:00
dcb
…
dccp
…
decnet
…
dns_resolver
…
dsa
…
ethernet
…
hsr
…
ieee802154
ieee802154: enforce CAP_NET_RAW for raw sockets
2019-10-05 12:30:15 +02:00
ipv4
net: ipv4: avoid mixed n_redirects and rate_tokens usage
2019-10-07 18:53:21 +02:00
ipv6
ipv6: Handle missing host route in __ipv6_ifa_notify
2019-10-07 18:53:24 +02:00
ipx
…
irda
…
iucv
…
kcm
…
key
xfrm: clean up xfrm protocol checks
2019-09-16 08:19:32 +02:00
l2tp
compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
2019-08-11 12:22:17 +02:00
l3mdev
…
lapb
lapb: fixed leak of control-blocks.
2019-06-22 08:17:22 +02:00
llc
…
mac80211
mac80211: handle deauthentication/disassociation from TDLS peer
2019-10-05 12:30:09 +02:00
mac802154
…
mpls
…
ncsi
…
netfilter
netfilter: nf_conntrack_ftp: Fix debug output
2019-09-21 07:14:16 +02:00
netlabel
…
netlink
…
netrom
netrom: hold sock when setting skb->destructor
2019-08-04 09:33:35 +02:00
nfc
NFC: fix attrs checks in netlink interface
2019-10-07 18:53:25 +02:00
openvswitch
openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC
2019-10-05 12:30:13 +02:00
packet
net/packet: fix race in tpacket_snd()
2019-08-25 10:51:51 +02:00
phonet
…
qrtr
net: qrtr: Stop rx_worker before freeing node
2019-10-05 12:30:13 +02:00
rds
net/rds: Fix error handling in rds_ib_add_one()
2019-10-07 18:53:23 +02:00
rfkill
…
rose
…
rxrpc
rxrpc: Fix send on a connected, but unbound socket
2019-08-04 09:33:34 +02:00
sched
sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
2019-10-07 18:53:24 +02:00
sctp
sctp: use transport pf_retrans in sctp_do_8_2_transport_strike
2019-09-21 07:14:03 +02:00
strparser
…
sunrpc
net :sunrpc :clnt :Fix xps refcount imbalance on the error path
2019-07-21 09:05:57 +02:00
switchdev
…
tipc
tipc: add NULL pointer check before calling kfree_rcu
2019-09-21 07:14:03 +02:00
unix
…
vmw_vsock
…
wimax
…
wireless
nl80211: validate beacon head
2019-10-17 13:42:23 -07:00
x25
…
xfrm
xfrm: clean up xfrm protocol checks
2019-09-16 08:19:32 +02:00
compat.c
…
Kconfig
…
Makefile
…
socket.c
bpf: get rid of pure_initcall dependency to enable jits
2019-08-25 10:51:40 +02:00
sysctl_net.c
…