android_kernel_google_msm/net/wireless
Jianmin Zhu 58d618c7b5 cfg80211: Fix use after free when process wdev events
"bssid" is only initialized out of the while loop, in case of two
events with same type: EVENT_CONNECT_RESULT, but one has zero
ether addr, the other is non-zero, the bssid pointer will be
referenced twice, which lead to use-after-free issue

Change-Id: Ie8a24275f7ec5c2f936ef0a802a42e5f63be9c71
CRs-Fixed: 2254305
Signed-off-by: Zhu Jianmin <jianminz@codeaurora.org>
2020-01-17 18:07:42 +01:00
..
.gitignore
Kconfig net: wireless: Add CFG80211_ALLOW_RECONNECT option 2012-04-09 13:57:55 -07:00
Makefile
chan.c nl80211: Parse channel type attribute in an ibss join request 2011-12-06 16:05:24 -05:00
core.c Merge remote-tracking branch 'stable/linux-3.4.y' into lineage-15.1 2017-12-27 17:13:15 +03:00
core.h Merge remote-tracking branch 'stable/linux-3.4.y' into lineage-15.1 2017-12-27 17:13:15 +03:00
db.txt update net/wireless/db.txt 2013-05-16 15:16:13 -07:00
debugfs.c simple_open: automatically convert to simple_open() 2012-04-05 15:25:50 -07:00
debugfs.h
ethtool.c
ethtool.h
genregdb.awk cfg80211: relicense reg.c reg.h and genregdb.awk to ISC 2012-01-04 14:30:41 -05:00
ibss.c net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules 2011-10-31 19:30:30 -04:00
lib80211.c lib80211: remove exports for functions not called by other modules 2011-08-09 15:42:36 -04:00
lib80211_crypt_ccmp.c wireless: Remove unnecessary OOM logging messages 2011-09-13 15:45:02 -04:00
lib80211_crypt_tkip.c wireless: Remove unnecessary OOM logging messages 2011-09-13 15:45:02 -04:00
lib80211_crypt_wep.c wireless: Remove unnecessary OOM logging messages 2011-09-13 15:45:02 -04:00
mesh.c {nl,cfg,mac}80211: Implement RSSI threshold for mesh peering 2012-03-05 15:23:15 -05:00
mlme.c cfg80211/mac80211: report signal strength for mgmt frames 2012-03-06 15:16:05 -05:00
nl80211.c cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE 2018-01-13 17:13:42 +03:00
nl80211.h cfg80211/mac80211: report signal strength for mgmt frames 2012-03-06 15:16:05 -05:00
radiotap.c radiotap: fix bitmap-end-finding buffer overrun 2014-01-08 09:42:12 -08:00
reg.c Merge remote-tracking branch 'stable/linux-3.4.y' into lineage-15.1 2017-12-27 17:13:15 +03:00
reg.h cfg80211: relicense reg.c reg.h and genregdb.awk to ISC 2012-01-04 14:30:41 -05:00
regdb.h cfg80211: relicense reg.c reg.h and genregdb.awk to ISC 2012-01-04 14:30:41 -05:00
scan.c net/wireless: Support to disable CCK rate for management frame 2013-02-25 11:36:59 -08:00
sme.c Merge remote-tracking branch 'stable/linux-3.4.y' into lineage-15.1 2017-12-27 17:13:15 +03:00
sysfs.c mac80211: fix suspend/resume races with unregister hw 2011-08-22 14:21:40 -04:00
sysfs.h
util.c cfg80211: Fix use after free when process wdev events 2020-01-17 18:07:42 +01:00
wext-compat.c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux 2011-11-22 14:05:46 -05:00
wext-compat.h cfg80211: remove unused wext handler exports 2011-08-08 14:26:29 -04:00
wext-core.c net/wireless/wext-core.c: add missing kfree 2012-04-09 15:54:50 -04:00
wext-priv.c
wext-proc.c
wext-sme.c cfg80211: Add background scan period attribute. 2012-03-12 14:19:34 -04:00
wext-spy.c net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules 2011-10-31 19:30:30 -04:00