Johannes Berg 35f432a03e mac80211: initialize fast-xmit 'info' later ... In ieee80211_xmit_fast(), 'info' is initialized to point to the skb that's passed in, but that skb may later be replaced by a clone (if it was shared), leading to an invalid pointer. This can lead to use-after-free and also later crashes since the real SKB's info->hw_queue doesn't get initialized properly. Fix this by assigning info only later, when it's needed, after the skb replacement (may have) happened. Cc: stable@vger.kernel.org Reported-by: Ben Greear <greearb@candelatech.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com>		2017-01-02 11:28:25 +01:00
..
aes_ccm.c	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
aes_ccm.h	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
aes_cmac.c	mac80211: FILS AEAD protection for station mode association frames	2016-10-27 16:03:25 +02:00
aes_cmac.h	mac80211: FILS AEAD protection for station mode association frames	2016-10-27 16:03:25 +02:00
aes_gcm.c	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
aes_gcm.h	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
aes_gmac.c	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
aes_gmac.h	mac80211: move struct aead_req off the stack	2016-10-17 16:14:04 +02:00
agg-rx.c	mac80211: fix tid_agg_rx NULL dereference	2016-10-19 12:11:49 +02:00
agg-tx.c	mac80211: reject TSPEC TIDs (TSIDs) for aggregation	2016-09-15 10:08:52 +02:00
cfg.c	mac80211: validate new interface's beacon intervals	2016-10-27 09:18:07 +02:00
chan.c	mac80211: add boilerplate code for start / stop NAN	2016-09-30 13:21:19 +02:00
debug.h
debugfs_key.c	mac80211: move TKIP TX IVs to public part of key struct	2016-02-24 09:04:38 +01:00
debugfs_key.h
debugfs_netdev.c	mac80211: filter multicast data packets on AP / AP_VLAN	2016-10-12 11:33:29 +02:00
debugfs_netdev.h
debugfs_sta.c	mac80211: improve RX aggregation data in debugfs	2016-10-19 12:12:11 +02:00
debugfs_sta.h
debugfs.c	mac80211: add a HW flag for supporting HW TX fragmentation	2016-10-19 12:12:44 +02:00
debugfs.h
driver-ops.c	mac80211: add offset_tsf driver op and use it for mesh	2016-09-30 13:45:44 +02:00
driver-ops.h	mac80211: add offset_tsf driver op and use it for mesh	2016-09-30 13:45:44 +02:00
ethtool.c	mac80211: move station statistics into sub-structs	2015-10-21 10:08:22 +02:00
fils_aead.c	mac80211: fils_aead: fix encrypt error handling	2016-10-28 12:59:12 +02:00
fils_aead.h	mac80211: FILS AEAD protection for station mode association frames	2016-10-27 16:03:25 +02:00
ht.c	mac80211: limit the A-MSDU Tx based on peer's capabilities	2016-02-24 09:04:20 +01:00
ibss.c	cfg80211: remove enum ieee80211_band	2016-04-12 15:56:15 +02:00
ieee80211_i.h	linux: drop __bitwise__ everywhere	2016-12-16 00:13:41 +02:00
iface.c	Among various cleanups and improvements, we have the following:	2016-10-29 17:28:45 -04:00
Kconfig
key.c	mac80211: don't call drv_set_default_unicast_key() for VLANs	2016-12-13 15:57:59 +01:00
key.h	mac80211: move TKIP TX IVs to public part of key struct	2016-02-24 09:04:38 +01:00
led.c
led.h
main.c	mac80211: Claim Fast Initial Link Setup (FILS) STA support	2016-10-27 16:03:26 +02:00
Makefile	Makefile: drop -D__CHECK_ENDIAN__ from cflags	2016-12-16 00:13:43 +02:00
mesh_hwmp.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-09-23 06:46:57 -04:00
mesh_pathtbl.c	mac80211: make mpath path fixing more robust	2016-09-12 12:27:14 +02:00
mesh_plink.c	mac80211: use common cleanup for user/!user_mpm	2016-06-30 12:06:41 +02:00
mesh_ps.c
mesh_sync.c	mac80211: mesh: decrease max drift	2016-09-30 13:47:00 +02:00
mesh.c	mac80211: mesh: flush stations before beacons are stopped	2016-08-03 08:45:15 +02:00
mesh.h	mac80211: mesh: fix cleanup for mesh pathtable	2016-04-05 21:34:53 +02:00
michael.c
michael.h
mlme.c	cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts	2016-12-09 12:57:49 +01:00
ocb.c	mac80211: remove rx_stats.last_rx update after sta alloc	2016-04-06 13:18:15 +02:00
offchannel.c	mac80211: fix CMD_FRAME for AP_VLAN	2016-10-12 09:19:12 +02:00
pm.c	mac80211: remove useless open_count check	2016-09-13 15:39:29 +02:00
rate.c	cfg80211: remove enum ieee80211_band	2016-04-12 15:56:15 +02:00
rate.h	mac80211: remove sta_info debugfs sub-struct	2016-04-05 11:59:05 +02:00
rc80211_minstrel_debugfs.c
rc80211_minstrel_ht_debugfs.c
rc80211_minstrel_ht.c	cfg80211: remove enum ieee80211_band	2016-04-12 15:56:15 +02:00
rc80211_minstrel_ht.h
rc80211_minstrel.c	cfg80211: remove enum ieee80211_band	2016-04-12 15:56:15 +02:00
rc80211_minstrel.h
rx.c	mac80211: Ensure enough headroom when forwarding mesh pkt	2016-12-13 16:08:37 +01:00
scan.c	mac80211: fix scan completed tracing	2016-09-15 16:46:16 +02:00
spectmgmt.c	mac80211: parse wide bandwidth channel switch IE with workaround	2016-07-06 14:55:04 +02:00
sta_info.c	mac80211: fix legacy and invalid rx-rate report	2016-12-15 10:54:48 +01:00
sta_info.h	mac80211: fix tid_agg_rx NULL dereference	2016-10-19 12:11:49 +02:00
status.c	mac80211: Use rhltable instead of rhashtable	2016-09-20 04:43:36 -04:00
tdls.c	mac80211: TDLS: don't require beaconing for AP BW	2016-08-30 08:03:41 +02:00
tkip.c	mac80211: move TKIP TX IVs to public part of key struct	2016-02-24 09:04:38 +01:00
tkip.h	mac80211: move TKIP TX IVs to public part of key struct	2016-02-24 09:04:38 +01:00
trace_msg.h
trace.c
trace.h	mac80211: add offset_tsf driver op and use it for mesh	2016-09-30 13:45:44 +02:00
tx.c	mac80211: initialize fast-xmit 'info' later	2017-01-02 11:28:25 +01:00
util.c	mac80211: validate new interface's beacon intervals	2016-10-27 09:18:07 +02:00
vht.c	mac80211: Ignore VHT IE from peer with wrong rx_mcs_map	2016-11-15 14:18:43 +01:00
wep.c
wep.h
wme.c	mac80211: preserve more bits when building QoS header	2016-10-12 14:17:13 +02:00
wme.h
wpa.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-10-30 12:42:58 -04:00
wpa.h