7d304ceb53
commit 2cf5eb3ab7bb7f2e3a70edcef236cd62c87db030 upstream. The code to send the RX PN data (for each TID) to the firmware has a devastating bug: it overwrites the data for TID 0 with all the TID data, leaving the remaining TIDs zeroed. This will allow replays to actually be accepted by the firmware, which could allow waking up the system. Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Luca Coelho <luciano.coelho@intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
---|---|---|
.. | ||
dvm | ||
mvm | ||
pcie | ||
Kconfig | ||
Makefile | ||
iwl-1000.c | ||
iwl-2000.c | ||
iwl-5000.c | ||
iwl-6000.c | ||
iwl-7000.c | ||
iwl-agn-hw.h | ||
iwl-config.h | ||
iwl-csr.h | ||
iwl-debug.c | ||
iwl-debug.h | ||
iwl-devtrace.c | ||
iwl-devtrace.h | ||
iwl-drv.c | ||
iwl-drv.h | ||
iwl-eeprom-parse.c | ||
iwl-eeprom-parse.h | ||
iwl-eeprom-read.c | ||
iwl-eeprom-read.h | ||
iwl-fh.h | ||
iwl-fw-file.h | ||
iwl-fw.h | ||
iwl-io.c | ||
iwl-io.h | ||
iwl-modparams.h | ||
iwl-notif-wait.c | ||
iwl-notif-wait.h | ||
iwl-nvm-parse.c | ||
iwl-nvm-parse.h | ||
iwl-op-mode.h | ||
iwl-phy-db.c | ||
iwl-phy-db.h | ||
iwl-prph.h | ||
iwl-test.c | ||
iwl-test.h | ||
iwl-testmode.h | ||
iwl-trans.h |