joy/android_kernel_sony_sdm845
Watch
1
Fork
You've already forked android_kernel_sony_sdm845
 0
Code Issues Pull requests Projects Releases Wiki Activity
android_kernel_sony_sdm845/net
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Johannes Berg a873afd7d8 nl80211: validate beacon head 
commit f88eb7c0d002a67ef31aeb7850b42ff69abc46dc upstream.

We currently don't validate the beacon head, i.e. the header,
fixed part and elements that are to go in front of the TIM
element. This means that the variable elements there can be
malformed, e.g. have a length exceeding the buffer size, but
most downstream code from this assumes that this has already
been checked.

Add the necessary checks to the netlink policy.

Cc: stable@vger.kernel.org
Fixes: ed1b6cc7f8 ("cfg80211/nl80211: add beacon settings")
Link: https://lore.kernel.org/r/1569009255-I7ac7fbe9436e9d8733439eab8acbbd35e55c74ef@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-10-17 13:42:23 -07:00
..
6lowpan 6lowpan: iphc: reset mac_header after decompress to fix panic 2018-10-03 17:01:42 -07:00
9p 9p/virtio: Add cleanup path in p9_virtio_init 2019-08-04 09:33:28 +02:00
802
8021q vlan: disable SIOCSHWTSTAMP in container 2019-05-16 19:43:46 +02:00
appletalk appletalk: enforce CAP_NET_RAW for raw sockets 2019-10-05 12:30:15 +02:00
atm net: atm: Fix potential Spectre v1 vulnerabilities 2019-04-27 09:34:40 +02:00
ax25 ax25: enforce CAP_NET_RAW for raw sockets 2019-10-05 12:30:15 +02:00
batman-adv batman-adv: Only read OGM2 tvlv_len after buffer len check 2019-09-21 07:14:14 +02:00
bluetooth Revert "Bluetooth: validate BLE connection interval updates" 2019-10-05 12:30:05 +02:00
bridge bridge/mdb: remove wrong use of NLM_F_MULTI 2019-09-21 07:14:01 +02:00
caif caif: reduce stack size with KASAN 2019-05-08 07:19:07 +02:00
can can: purge socket error queue on sock destruct 2019-07-10 09:55:33 +02:00
ceph libceph: use kbasename() and kill ceph_file_part() 2019-08-11 12:22:15 +02:00
core net: Unpublish sk from sk_reuseport_cb before call_rcu 2019-10-07 18:53:21 +02:00
dcb net: dcb: For wild-card lookups, use priority -1, not 0 2018-09-19 22:47:15 +02:00
dccp dccp: do not use ipv6 header for ipv4 flow 2019-04-03 06:24:14 +02:00
decnet dn_getsockoptdecnet: move nf_{get/set}sockopt outside sock lock 2018-02-25 11:05:44 +01:00
dns_resolver KEYS: DNS: fix parsing multiple options 2018-07-22 14:27:39 +02:00
dsa net: dsa: slave: Don't propagate flag changes on down slave interfaces 2019-02-12 19:45:00 +01:00
ethernet net: introduce device min_header_len 2017-02-18 15:11:43 +01:00
hsr net/hsr: fix possible crash in add_timer() 2019-03-19 13:14:08 +01:00
ieee802154 ieee802154: enforce CAP_NET_RAW for raw sockets 2019-10-05 12:30:15 +02:00
ipv4 net: ipv4: avoid mixed n_redirects and rate_tokens usage 2019-10-07 18:53:21 +02:00
ipv6 ipv6: Handle missing host route in __ipv6_ifa_notify 2019-10-07 18:53:24 +02:00
ipx ipx: call ipxitf_put() in ioctl error path 2017-05-25 15:44:41 +02:00
irda irda: Only insert new objects into the global database via setsockopt 2018-09-15 09:43:01 +02:00
iucv net/iucv: Free memory obtained by kzalloc 2018-03-31 18:11:34 +02:00
kcm kcm: switch order of device registration to fix a crash 2019-04-17 08:36:44 +02:00
key xfrm: clean up xfrm protocol checks 2019-09-16 08:19:32 +02:00
l2tp compat_ioctl: pppoe: fix PPPOEIOCSFWD handling 2019-08-11 12:22:17 +02:00
l3mdev net: ipv6: Remove l3mdev_get_saddr6 2016-09-10 23:12:53 -07:00
lapb lapb: fixed leak of control-blocks. 2019-06-22 08:17:22 +02:00
llc llc: fix skb leak in llc_build_and_send_ui_pkt() 2019-06-11 12:22:33 +02:00
mac80211 mac80211: handle deauthentication/disassociation from TDLS peer 2019-10-05 12:30:09 +02:00
mac802154 net: mac802154: tx: expand tailroom if necessary 2018-09-09 20:01:19 +02:00
mpls mpls, nospec: Sanitize array index in mpls_label_ok() 2018-03-11 16:21:34 +01:00
ncsi net/ncsi: Improve HNCDSC AEN handler 2016-10-20 11:23:08 -04:00
netfilter netfilter: nf_conntrack_ftp: Fix debug output 2019-09-21 07:14:16 +02:00
netlabel netlabel: fix out-of-bounds memory accesses 2019-03-13 14:04:53 -07:00
netlink netlink: Don't shift on 64 for ngroups 2018-08-09 12:17:59 +02:00
netrom netrom: hold sock when setting skb->destructor 2019-08-04 09:33:35 +02:00
nfc NFC: fix attrs checks in netlink interface 2019-10-07 18:53:25 +02:00
openvswitch openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC 2019-10-05 12:30:13 +02:00
packet net/packet: fix race in tpacket_snd() 2019-08-25 10:51:51 +02:00
phonet phonet: fix building with clang 2019-03-23 13:19:44 +01:00
qrtr net: qrtr: Stop rx_worker before freeing node 2019-10-05 12:30:13 +02:00
rds net/rds: Fix error handling in rds_ib_add_one() 2019-10-07 18:53:23 +02:00
rfkill rfkill: gpio: fix memory leak in probe error path 2018-05-16 10:08:43 +02:00
rose net: rose: fix a possible stack overflow 2019-04-03 06:24:14 +02:00
rxrpc rxrpc: Fix send on a connected, but unbound socket 2019-08-04 09:33:34 +02:00
sched sch_cbq: validate TCA_CBQ_WRROPT to avoid crash 2019-10-07 18:53:24 +02:00
sctp sctp: use transport pf_retrans in sctp_do_8_2_transport_strike 2019-09-21 07:14:03 +02:00
strparser strparser: Fix incorrect strp->need_bytes value. 2018-04-29 11:32:02 +02:00
sunrpc net :sunrpc :clnt :Fix xps refcount imbalance on the error path 2019-07-21 09:05:57 +02:00
switchdev switchdev: Execute bridge ndos only for bridge ports 2016-10-19 10:58:04 -04:00
tipc tipc: add NULL pointer check before calling kfree_rcu 2019-09-21 07:14:03 +02:00
unix missing barriers in some of unix_sock ->addr and ->path accesses 2019-03-19 13:14:10 +01:00
vmw_vsock vsock/virtio: Initialize core virtio vsock before registering the driver 2019-05-25 18:26:44 +02:00
wimax
wireless nl80211: validate beacon head 2019-10-17 13:42:23 -07:00
x25 net/x25: fix a race in x25_bind() 2019-03-19 13:14:09 +01:00
xfrm xfrm: clean up xfrm protocol checks 2019-09-16 08:19:32 +02:00
compat.c sock: Make sock->sk_stamp thread-safe 2019-01-09 16:16:41 +01:00
Kconfig strparser: Stream parser for messages 2016-08-17 19:36:23 -04:00
Makefile strparser: Stream parser for messages 2016-08-17 19:36:23 -04:00
socket.c bpf: get rid of pure_initcall dependency to enable jits 2019-08-25 10:51:40 +02:00
sysctl_net.c Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace 2016-10-06 09:52:23 -07:00