Johannes Berg bd02cd2549 radiotap: fix bitmap-end-finding buffer overrun ... Evan Huus found (by fuzzing in wireshark) that the radiotap iterator code can access beyond the length of the buffer if the first bitmap claims an extension but then there's no data at all. Fix this. Cc: stable@vger.kernel.org Reported-by: Evan Huus <eapache@gmail.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com>		2013-12-16 12:06:43 +01:00
..
.gitignore	wireless: support internal statically compiled regulatory database	2009-12-21 18:56:10 -05:00
Kconfig	lib80211: hide Kconfig symbol	2012-11-16 14:29:09 -05:00
Makefile	cfg80211: add tracing to rdev-ops	2012-10-18 10:53:37 +02:00
ap.c	cfg80211: move exported event functions into nl80211	2013-03-06 16:35:46 +01:00
chan.c	nl80211/cfg80211: enable DFS for IBSS mode	2013-10-28 15:05:21 +01:00
core.c	cfg80211: disable CSA for all drivers	2013-12-02 11:53:44 +01:00
core.h	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless	2013-11-04 14:45:14 -05:00
db.txt	wireless: support internal statically compiled regulatory database	2009-12-21 18:56:10 -05:00
debugfs.c	mac80211: fix some snprintf misuses	2013-10-01 12:16:51 +02:00
debugfs.h	cfg80211/mac80211: use debugfs_remove_recursive	2009-10-30 16:49:18 -04:00
ethtool.c	ethtool: fix drvinfo strings set in drivers	2013-01-06 21:06:31 -08:00
ethtool.h	net/wireless/ethtool.h: drop unnecessary include of linux/ethtool.h	2009-10-07 16:39:49 -04:00
genregdb.awk	cfg80211: parse dfs region for internal regdb option	2013-10-01 12:18:36 +02:00
ibss.c	cfg80211: fix ibss wext chandef creation	2013-11-25 16:50:02 +01:00
lib80211.c	lib80211: remove exports for functions not called by other modules	2011-08-09 15:42:36 -04:00
lib80211_crypt_ccmp.c	hostap: Don't use create_proc_read_entry()	2013-04-29 15:41:56 -04:00
lib80211_crypt_tkip.c	hostap: Don't use create_proc_read_entry()	2013-04-29 15:41:56 -04:00
lib80211_crypt_wep.c	hostap: Don't use create_proc_read_entry()	2013-04-29 15:41:56 -04:00
mesh.c	cfg80211/mac80211: get mandatory rates based on scan width	2013-07-16 09:58:07 +03:00
mlme.c	cfg80211: update dfs_state_entered upon dfs_state change	2013-10-21 14:50:27 +02:00
nl80211.c	cfg80211: ignore supported rates for nonexistant bands on scan	2013-11-25 16:54:26 +01:00
nl80211.h	cfg80211: add flags to cfg80211_rx_mgmt()	2013-08-23 16:06:03 +02:00
radiotap.c	radiotap: fix bitmap-end-finding buffer overrun	2013-12-16 12:06:43 +01:00
rdev-ops.h	cfg80211: add wdev to testmode cmd	2013-08-12 14:11:37 +02:00
reg.c	cfg80211: export reg_initiator_name()	2013-10-28 15:05:27 +01:00
reg.h	cfg80211: rename regulatory_hint_11d() to regulatory_hint_country_ie()	2013-10-09 09:37:57 +02:00
regdb.h	cfg80211: relicense reg.c reg.h and genregdb.awk to ISC	2012-01-04 14:30:41 -05:00
scan.c	cfg80211: fix scheduled scan pointer access	2013-10-21 11:59:15 +02:00
sme.c	cfg80211: fix WARN_ON for re-association to the expired BSS	2013-12-05 15:00:29 +01:00
sysfs.c	net: wireless: convert class code to use dev_groups	2013-07-25 16:34:40 -07:00
sysfs.h	net: misc: Remove extern from function prototypes	2013-10-19 19:12:11 -04:00
trace.c	cfg80211: add tracing to rdev-ops	2012-10-18 10:53:37 +02:00
trace.h	cfg80211: add wdev to testmode cmd	2013-08-12 14:11:37 +02:00
util.c	nl80211/cfg80211: enable DFS for IBSS mode	2013-10-28 15:05:21 +01:00
wext-compat.c	cfg80211: vastly simplify locking	2013-05-25 00:02:15 +02:00
wext-compat.h	cfg80211: remove unused wext handler exports	2011-08-08 14:26:29 -04:00
wext-core.c	wext: include wireless event id when it has a size problem	2012-09-05 16:12:44 +02:00
wext-priv.c	wext: fix potential private ioctl memory content leak	2010-09-20 13:41:40 -04:00
wext-proc.c	net: proc: change proc_net_remove to remove_proc_entry	2013-02-18 14:53:08 -05:00
wext-sme.c	cfg80211: separate internal SME implementation	2013-06-04 13:03:11 +02:00
wext-spy.c	wireless: Convert compare_ether_addr to ether_addr_equal	2012-05-09 20:49:19 -04:00