Arunk Khandavalli a488247ff6 cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE ... [ Upstream commit 4f0223bfe9c3e62d8f45a85f1ef1b18a8a263ef9 ] nl80211_update_ft_ies() tried to validate NL80211_ATTR_IE with is_valid_ie_attr() before dereferencing it, but that helper function returns true in case of NULL pointer (i.e., attribute not included). This can result to dereferencing a NULL pointer. Fix that by explicitly checking that NL80211_ATTR_IE is included. Fixes: 355199e02b ("cfg80211: Extend support for IEEE 802.11r Fast BSS Transition") Signed-off-by: Arunk Khandavalli <akhandav@codeaurora.org> Signed-off-by: Jouni Malinen <jouni@codeaurora.org> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Sasha Levin <alexander.levin@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-07-27 21:51:54 +02:00
..
9p	9p: forgetting to cancel request on interrupted zero-copy RPC	2015-08-03 09:29:47 -07:00
802	…
8021q	…
appletalk	…
atm	…
ax25	Import latest Samsung release	2017-04-18 03:43:52 +02:00
batman-adv	batman-adv: Fix broadcast/ogm queue limit on a removed interface	2016-06-07 10:42:53 +02:00
bluetooth	Bluetooth: hidp: Fix handling of strncpy for hid->name information	2019-07-27 21:51:39 +02:00
bridge	netfilter: bridge: ebt_among: add more missing match size checks	2019-07-27 21:49:26 +02:00
caif	net/unix: sk_socket can disappear when state is unlocked	2015-09-16 18:20:18 +05:30
can	can: add missing initialisations in CAN related skbuffs	2015-03-26 15:00:58 +01:00
ceph	libceph: introduce ceph_crypt() for in-place en/decryption	2017-04-22 23:02:50 +02:00
core	UPSTREAM: net: remove open-coded skb_cow_head.	2019-07-27 21:51:06 +02:00
dcb	…
dccp	dccp: check sk for closed state in dccp_sendmsg()	2019-07-27 21:49:52 +02:00
decnet	Import latest Samsung release	2017-04-18 03:43:52 +02:00
dns_resolver	…
dsa	…
ethernet	…
ieee802154	…
ipc_router	net: ipc_router: Fix buffer overflow during memcpy	2019-07-27 21:51:21 +02:00
ipv4	net: raw: do not report ICMP redirects to user space	2019-07-27 21:51:42 +02:00
ipv6	net: raw: do not report ICMP redirects to user space	2019-07-27 21:51:42 +02:00
ipx	ipx: call ipxitf_put() in ioctl error path	2018-01-21 21:05:49 -08:00
irda	irda: Fix lockdep annotations in hashbin_delete().	2017-04-22 23:02:49 +02:00
iucv	…
key	af_key: fix buffer overread in parse_exthdrs()	2019-07-27 21:46:23 +02:00
l2tp	l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache	2019-07-27 21:51:14 +02:00
lapb	…
llc	net/llc: avoid BUG_ON() in skb_orphan()	2017-04-22 23:03:00 +02:00
mac80211	mac80211: use constant time comparison with keys	2019-07-27 21:45:47 +02:00
mac802154	…
netfilter	BACKPORT: ANDROID: Use sk_uid to replace uid get from socket file	2019-07-27 21:51:34 +02:00
netlabel	netlabel: add address family checks to netlbl_{sock,req}_delattr()	2019-07-27 21:41:59 +02:00
netlink	BACKPORT: netlink: add a start callback for starting a netlink dump	2019-07-27 21:51:36 +02:00
netrom	…
nfc	NFC: llcp: Limit size of SDP URI	2019-07-27 21:51:24 +02:00
openvswitch	…
packet	packet: refine ring v3 block size test to hold one frame	2019-07-27 21:51:14 +02:00
phonet	This is the 3.10.96 stable release	2017-04-18 17:16:02 +02:00
rds	This is the 3.10.99 stable release	2017-04-18 17:17:46 +02:00
rfkill	net: rfkill: Do not ignore errors from regulator_enable()	2019-07-27 21:42:01 +02:00
rmnet_data	net: rmnet_data: Change the log level for unknown IOCTL's	2019-07-27 21:51:01 +02:00
rose	…
rxrpc	rxrpc: Fix several cases where a padded len isn't checked in ticket decode	2019-07-27 21:44:13 +02:00
sched	sch_fq_codel: avoid double free on init failure	2019-07-27 21:45:13 +02:00
sctp	sctp: fix a type cast warnings that causes a_rwnd gets the wrong value	2019-07-27 21:45:39 +02:00
sunrpc	kernel: make groups_sort calling a responsibility group_info allocators	2019-07-27 21:46:18 +02:00
tipc	net/tipc: initialize security state for new connection socket	2015-10-01 12:07:35 +02:00
unix	net/unix: don't show information about sockets from other namespaces	2019-07-27 21:45:50 +02:00
vmw_vsock	VSOCK: do not disconnect socket when peer has shutdown SEND only	2016-06-07 10:42:54 +02:00
wimax	…
wireless	cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE	2019-07-27 21:51:54 +02:00
x25	net: fix a kernel infoleak in x25 module	2016-06-07 10:42:54 +02:00
xfrm	xfrm: fix 'passing zero to ERR_PTR()' warning	2019-07-27 21:51:39 +02:00
Kconfig	…
Makefile	…
activity_stats.c	…
compat.c	net: support compat 64-bit time in {s,g}etsockopt	2019-07-27 21:49:09 +02:00
nonet.c	…
socket.c	UPSTREAM: net: socket: Make unnecessarily global sockfs_setattr() static	2019-07-27 21:51:01 +02:00
sysctl_net.c	…