Bob Copeland b3e7de873d mac80211: add missing length check for confirm frames ...

Although mesh_rx_plink_frame() already checks that frames have enough
bytes for the action code plus another two bytes for capability/reason
code, it doesn't take into account that confirm frames also have an
additional two-byte aid.  As a result, a corrupt frame could cause a
subsequent subtraction to wrap around to ill effect.  Add another
check for this case.

Signed-off-by: Bob Copeland <me@bobcopeland.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>

2015-07-17 14:39:42 +02:00

..

6lowpan

…

9p

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2015-07-04 19:36:06 -07:00

802

…

8021q

vlan: Add GRO support for non hardware accelerated vlan

2015-06-01 16:50:52 -07:00

appletalk

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

atm

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

ax25

ax25: Stop using sock->sk_protinfo.

2015-06-28 16:55:44 -07:00

batman-adv

batman-adv: change the MAC of each VLAN upon ndo_set_mac_address

2015-06-07 17:07:20 +02:00

bluetooth

bluetooth: fix list handling

2015-07-04 19:11:33 -07:00

bridge

bridge: mdb: allow the user to delete mdb entry if there's a querier

2015-07-10 18:18:00 -07:00

caif

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-06-01 22:51:30 -07:00

can

can: replace timestamp as unique skb attribute

2015-07-12 21:13:22 +02:00

ceph

libceph: treat sockaddr_storage with uninitialized family as blank

2015-07-09 20:30:34 +03:00

core

net: call rcu_read_lock early in process_backlog

2015-07-10 18:16:36 -07:00

dcb

…

dccp

sock_diag: specify info_size per inet protocol

2015-06-15 19:49:22 -07:00

decnet

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

dns_resolver

…

dsa

net: dsa: Fix off-by-one in switch address parsing

2015-07-11 23:25:16 -07:00

ethernet

net: Add full IPv6 addresses to flow_keys

2015-06-04 15:44:30 -07:00

hsr

…

ieee802154

nl802154: export supported commands

2015-06-04 12:27:15 +02:00

ipv4

net: inet_diag: always export IPV6_V6ONLY sockopt for listening sockets

2015-07-10 23:25:24 -07:00

ipv6

ipv6: Make MLD packets to only be processed locally

2015-07-03 09:52:38 -07:00

ipx

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

irda

irda: use msecs_to_jiffies for conversion to jiffies

2015-05-25 17:46:21 -04:00

iucv

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

key

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2015-06-24 16:49:49 -07:00

l2tp

net: Modify sk_alloc to not reference count the netns of kernel sockets.

2015-05-11 10:50:18 -04:00

lapb

…

llc

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

mac80211

mac80211: add missing length check for confirm frames

2015-07-17 14:39:42 +02:00

mac802154

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2015-06-24 16:49:49 -07:00

mpls

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-06-13 23:56:52 -07:00

netfilter

netfilter: nfnetlink: keep going batch handling on missing modules

2015-07-02 17:59:33 +02:00

netlabel

…

netlink

netlink: Delete an unnecessary check before the function call "module_put"

2015-07-03 09:27:43 -07:00

netrom

netfilter: Remove spurios included of netfilter.h

2015-06-18 21:14:32 +02:00

nfc

NFC: nci: fix mistake in uart generic driver

2015-06-15 18:10:37 +02:00

openvswitch

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-06-08 20:06:56 -07:00

packet

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-06-24 02:58:51 -07:00

phonet

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

rds

net-RDS: Delete an unnecessary check before the function call "module_put"

2015-07-03 09:27:42 -07:00

rfkill

net: rfkill: gpio: make better use of gpiod API

2015-05-29 13:13:45 +02:00

rose

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-06-24 02:58:51 -07:00

rxrpc

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

sched

net: sched: flower fix typo

2015-06-25 05:23:02 -07:00

sctp

sctp: Fix race between OOTB responce and route removal

2015-06-29 09:28:42 -07:00

sunrpc

Merge tag 'nfs-for-4.2-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs

2015-07-02 11:32:23 -07:00

switchdev

net: switchdev: don't abort unsupported operations

2015-07-11 21:29:55 -07:00

tipc

net/tipc: initialize security state for new connection socket

2015-07-08 16:08:23 -07:00

unix

net/unix: support SCM_SECURITY for stream sockets

2015-06-10 22:49:20 -07:00

vmw_vsock

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

wimax

…

wireless

wireless: regulatory: reduce log level of CRDA related messages

2015-07-17 14:37:23 +02:00

x25

net: Pass kern from net_proto_family.create to sk_alloc

2015-05-11 10:50:17 -04:00

xfrm

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2015-06-24 16:49:49 -07:00

compat.c

net: switch importing msghdr from userland to {compat_,}import_iovec()

2015-04-09 00:02:26 -04:00

Kconfig

net: add CONFIG_NET_INGRESS to enable ingress filtering

2015-05-14 01:10:05 -04:00

Makefile

…

socket.c

net: Add a struct net parameter to sock_create_kern

2015-05-11 10:50:17 -04:00

sysctl_net.c

…