Will Deacon 49e2da223b cfg80211: wext: Reject malformed SSID elements ...

Ensure the SSID element is bounds-checked prior to invoking memcpy()
with its length field.

Cc: <stable@vger.kernel.org>
Cc: Johannes Berg <johannes@sipsolutions.net>
Cc: Kees Cook <keescook@chromium.org>
Reported-by: Nicolas Waisman <nico@semmle.com>
Signed-off-by: Will Deacon <will@kernel.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
CVE-2019-17133
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>
Change-Id: If6a80f42391e0fef49c66260e4ef47000197e095

2020-05-20 09:44:16 +02:00

..

.gitignore

…

chan.c

…

core.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

core.h

BACKPORT: {nl,cfg}80211: support high bitrates

2019-08-08 15:08:48 +02:00

db.txt

misc: Import SM-G900H kernel source code

2019-08-02 15:14:10 +02:00

debugfs.c

…

debugfs.h

…

ethtool.c

…

ethtool.h

…

genregdb.awk

…

ibss.c

cfg80211: Add support for QoS mapping

2014-04-21 13:42:58 +05:30

Kconfig

misc: Import SM-G900H kernel source code

2019-08-02 15:14:10 +02:00

lib80211_crypt_ccmp.c

…

lib80211_crypt_tkip.c

…

lib80211_crypt_wep.c

…

lib80211.c

…

Makefile

…

mesh.c

cfg80211: Add support for QoS mapping

2014-04-21 13:42:58 +05:30

mlme.c

Revert "cfg80211: add support for 802.11r Fast BSS Transition"

2013-03-07 23:01:35 +05:30

nl80211.c

BACKPORT: {nl,cfg}80211: support high bitrates

2019-08-08 15:08:48 +02:00

nl80211.h

Revert "cfg80211: add support for 802.11r Fast BSS Transition"

2013-03-07 23:01:35 +05:30

radiotap.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

reg.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

reg.h

cfg80211: export regulatory_hint_user() API

2013-11-22 14:32:34 -08:00

regdb.h

…

scan.c

Merge remote-tracking branch 'google-common/deprecated/android-3.4' into lineage-16.0

2019-08-06 11:41:21 +02:00

sme.c

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

sysfs.c

…

sysfs.h

…

util.c

cfg80211: Fix use after free when process wdev events

2020-03-07 14:01:45 +01:00

wext-compat.c

…

wext-compat.h

…

wext-core.c

DO NOT MERGE: This gerrit is to enable deep KW_TAINT_ANALYS ON /kernel/net/wireless

2014-02-17 15:17:52 -08:00

wext-priv.c

…

wext-proc.c

…

wext-sme.c

cfg80211: wext: Reject malformed SSID elements

2020-05-20 09:44:16 +02:00

wext-spy.c

…