Johannes Berg bd02cd2549 radiotap: fix bitmap-end-finding buffer overrun ...

Evan Huus found (by fuzzing in wireshark) that the radiotap
iterator code can access beyond the length of the buffer if
the first bitmap claims an extension but then there's no
data at all. Fix this.

Cc: [email protected]
Reported-by: Evan Huus <[email protected]>
Signed-off-by: Johannes Berg <[email protected]>

2013-12-16 12:06:43 +01:00

..

.gitignore

…

ap.c

…

chan.c

nl80211/cfg80211: enable DFS for IBSS mode

2013-10-28 15:05:21 +01:00

core.c

cfg80211: disable CSA for all drivers

2013-12-02 11:53:44 +01:00

core.h

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless

2013-11-04 14:45:14 -05:00

db.txt

…

debugfs.c

mac80211: fix some snprintf misuses

2013-10-01 12:16:51 +02:00

debugfs.h

…

ethtool.c

…

ethtool.h

…

genregdb.awk

cfg80211: parse dfs region for internal regdb option

2013-10-01 12:18:36 +02:00

ibss.c

cfg80211: fix ibss wext chandef creation

2013-11-25 16:50:02 +01:00

Kconfig

…

lib80211_crypt_ccmp.c

…

lib80211_crypt_tkip.c

…

lib80211_crypt_wep.c

…

lib80211.c

…

Makefile

…

mesh.c

cfg80211/mac80211: get mandatory rates based on scan width

2013-07-16 09:58:07 +03:00

mlme.c

cfg80211: update dfs_state_entered upon dfs_state change

2013-10-21 14:50:27 +02:00

nl80211.c

cfg80211: ignore supported rates for nonexistant bands on scan

2013-11-25 16:54:26 +01:00

nl80211.h

cfg80211: add flags to cfg80211_rx_mgmt()

2013-08-23 16:06:03 +02:00

radiotap.c

radiotap: fix bitmap-end-finding buffer overrun

2013-12-16 12:06:43 +01:00

rdev-ops.h

cfg80211: add wdev to testmode cmd

2013-08-12 14:11:37 +02:00

reg.c

cfg80211: export reg_initiator_name()

2013-10-28 15:05:27 +01:00

reg.h

cfg80211: rename regulatory_hint_11d() to regulatory_hint_country_ie()

2013-10-09 09:37:57 +02:00

regdb.h

…

scan.c

cfg80211: fix scheduled scan pointer access

2013-10-21 11:59:15 +02:00

sme.c

cfg80211: fix WARN_ON for re-association to the expired BSS

2013-12-05 15:00:29 +01:00

sysfs.c

net: wireless: convert class code to use dev_groups

2013-07-25 16:34:40 -07:00

sysfs.h

net: misc: Remove extern from function prototypes

2013-10-19 19:12:11 -04:00

trace.c

…

trace.h

cfg80211: add wdev to testmode cmd

2013-08-12 14:11:37 +02:00

util.c

nl80211/cfg80211: enable DFS for IBSS mode

2013-10-28 15:05:21 +01:00

wext-compat.c

…

wext-compat.h

…

wext-core.c

…

wext-priv.c

…

wext-proc.c

…

wext-sme.c

…

wext-spy.c

…