Dan Carpenter 6a950755ce ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() ... The "tsid" is a user controlled u8 which comes from debugfs. Values more than 15 are invalid because "active_tsids" is a 16 bit variable. If the value of "tsid" is more than 31 then that leads to a shift wrapping bug. Fixes: 8fffd9e5ec ("ath6kl: Implement support for QOS-enable and QOS-disable from userspace") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Link: https://lore.kernel.org/r/20200918142732.GA909725@mwanda		2020-09-22 10:46:46 +03:00
..
bmi.c	ath6kl: replace GFP_ATOMIC with GFP_KERNEL in ath6kl_bmi_init()	2018-07-31 10:48:45 +03:00
bmi.h
cfg80211.c	ath6kl: Use fallthrough pseudo-keyword	2020-08-17 13:21:19 +03:00
cfg80211.h	cfg80211: pass name_assign_type to rdev_add_virtual_intf()	2015-03-30 10:36:17 +02:00
common.h	ath6kl: add ath6kl_ prefix to crypto_type	2018-12-13 09:58:52 +01:00
core.c	ath6kl: add ability to set debug uart baud rate	2016-04-26 14:57:44 +03:00
core.h	ath6kl: Replace zero-length array with flexible-array	2020-05-06 09:21:30 +03:00
debug.c	ath6kl: Replace zero-length array with flexible-array	2020-05-06 09:21:30 +03:00
debug.h	ath6kl: add __printf verification to ath6kl_dbg	2017-04-13 15:43:39 +03:00
hif-ops.h
hif.c	ath6kl: enable firmware crash dumps on the AR6004	2016-09-09 15:12:59 +03:00
hif.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next	2020-06-03 16:27:18 -07:00
htc-ops.h
htc.h	ath6kl: spell "distribution" correctly in a comment.	2015-07-29 11:14:04 +03:00
htc_mbox.c	ath6kl: Fix a possible null-pointer dereference in ath6kl_htc_mbox_create()	2019-09-04 09:21:19 +03:00
htc_pipe.c	ath6kl: remove redundant check of status != 0	2019-04-29 17:50:10 +03:00
init.c	Merge ath-next from git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/ath.git	2020-08-18 16:17:20 +03:00
Kconfig	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
main.c	ath6kl: prevent potential array overflow in ath6kl_add_new_sta()	2020-08-17 13:22:08 +03:00
Makefile
recovery.c	timer: Remove init_timer_deferrable() in favor of timer_setup()	2017-10-05 15:01:18 +02:00
sdio.c	mmc: sdio: Move SDIO IDs from ath6kl driver to common include file	2020-05-29 12:37:59 +02:00
target.h
testmode.c	netlink: make validation more configurable for future strictness	2019-04-27 17:07:21 -04:00
testmode.h
trace.c
trace.h	ath: fix SPDX tags	2019-06-26 18:11:06 +03:00
txrx.c	ath6kl: remove redundant variables netlen, orig_buf, orig_len, dropped and stats	2018-07-30 20:57:05 +03:00
usb.c	wireless: Fix trivial spelling	2020-07-15 19:48:14 +03:00
wmi.c	ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd()	2020-09-22 10:46:46 +03:00
wmi.h	ath6kl: add ath6kl_ prefix to crypto_type	2018-12-13 09:58:52 +01:00