Luciano Coelho 09b661b332 wl12xx: fix potential buffer overflow in testmode nvs push ... We were allocating the size of the NVS file struct and not checking whether the length of the buffer passed was correct before copying it into the allocated memory. This is a security hole because buffer overflows can occur if the userspace passes a bigger file than what is expected. With this patch, we check if the size of the data passed from userspace matches the size required. This bug was introduced in 2.6.36. Cc: stable@kernel.org Reported-by: Ido Yariv <ido@wizery.com> Signed-off-by: Luciano Coelho <coelho@ti.com> Signed-off-by: John W. Linville <linville@tuxdriver.com>		2011-04-04 15:22:12 -04:00
..
ath	ath9k: Fix phy info print message with AR9485 chipset.	2011-04-04 15:22:11 -04:00
b43	b43: allocate receive buffers big enough for max frame len + offset	2011-04-04 15:22:11 -04:00
b43legacy	mac80211: make tx() operation return void	2011-02-25 15:32:34 -05:00
hostap	net: change to new flag variable	2011-03-17 14:05:35 +01:00
ipw2x00	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6	2011-03-16 16:29:25 -07:00
iwlegacy	iwlegacy: fix bugs in change_interface	2011-03-29 15:45:14 -04:00
iwlwifi	iwlagn: fix error in command waiting	2011-03-23 15:22:04 -04:00
iwmc3200wifi	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6	2011-01-28 16:23:14 -05:00
libertas	libertas: fix write past end of array in mesh_id_get()	2011-03-11 14:15:36 -05:00
libertas_tf	mac80211: make tx() operation return void	2011-02-25 15:32:34 -05:00
orinoco	orinoco: Clear dangling pointer on hardware busy	2011-03-23 15:22:04 -04:00
p54	drivers: Final irq namespace conversion	2011-03-29 14:48:19 +02:00
prism54	…
rt2x00	wireless: rt2x00: rt2800usb.c add and identify ids	2011-03-29 15:45:14 -04:00
rtl818x	rtl8187: Change rate-control feedback	2011-03-04 14:05:17 -05:00
rtlwifi	rtlwifi: Fix memset argument order	2011-03-21 15:19:48 -04:00
wl12xx	wl12xx: fix potential buffer overflow in testmode nvs push	2011-04-04 15:22:12 -04:00
wl1251	drivers: Final irq namespace conversion	2011-03-29 14:48:19 +02:00
zd1211rw	zd1211rw: reset rx idle timer from tasklet	2011-04-04 15:22:12 -04:00
Kconfig	iwlwifi: split the drivers for agn and legacy devices 3945/4965	2011-02-21 11:27:26 -08:00
Makefile	rtlwifi: Fix build when RTL8192CU is selected, but RTL8192CE is not	2011-02-23 16:25:30 -05:00
adm8211.c	mac80211: make tx() operation return void	2011-02-25 15:32:34 -05:00
adm8211.h	…
airo.c	airo: use simple_write_to_buffer	2011-01-04 14:35:12 -05:00
airo.h	…
airo_cs.c	…
at76c50x-usb.c	at76c50x-usb: fix warning caused by at76_mac80211_tx now returning void	2011-02-28 13:57:30 -05:00
at76c50x-usb.h	ieee80211: add IEEE80211_COUNTRY_STRING_LEN definition	2011-03-09 16:10:56 -05:00
atmel.c	…
atmel.h	…
atmel_cs.c	…
atmel_pci.c	…
mac80211_hwsim.c	mac80211: make tx() operation return void	2011-02-25 15:32:34 -05:00
mwl8k.c	mwl8k: use kcalloc instead of kmalloc & memset	2011-03-09 16:10:45 -05:00
ray_cs.c	…
ray_cs.h	…
rayctl.h	…
rndis_wlan.c	rndis_wlan: use power save only for BCM4320b	2011-02-25 15:21:51 -05:00
wl3501.h	…
wl3501_cs.c	…
zd1201.c	…
zd1201.h	…