niansa-misc/linux
1
0
Fork 0
mirror of synced 2025-03-06 20:59:54 +01:00
Code Issues Projects Releases Packages Wiki Activity
linux/drivers/net/wireless/broadcom/brcm80211/brcmfmac
History
Arend Van Spriel d77facb884 brcmfmac: use local iftype avoiding use-after-free of virtual interface 
A use-after-free was found using KASAN. In brcmf_p2p_del_if() the virtual
interface is removed using call to brcmf_remove_interface(). After that
the virtual interface instance has been freed and should not be referenced.
Solve this by storing the nl80211 iftype in local variable, which is used
in a couple of places anyway.

Cc: stable@vger.kernel.org # 4.10.x, 4.9.x
Reported-by: Daniel J Blueman <daniel@quora.org>
Reviewed-by: Hante Meuleman <hante.meuleman@broadcom.com>
Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com>
Reviewed-by: Franky Lin <franky.lin@broadcom.com>
Signed-off-by: Arend van Spriel <arend.vanspriel@broadcom.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
2017-03-30 19:43:51 +03:00
..
bcdc.c brcmfmac: proto: add callback for queuing TX data 2016-11-09 03:30:32 +02:00
bcdc.h
bcmsdh.c brcmfmac: add support for BCM43455 with modalias sdio:c00v02D0dA9BF 2017-01-20 11:47:57 +02:00
btcoex.c brcmfmac: use jiffies for timeout in btcoex 2016-01-08 10:44:46 +02:00
btcoex.h
bus.h brcmfmac: rename brcmf_bus_start function to brcmf_bus_started 2017-01-20 12:03:57 +02:00
cfg80211.c lib/vsprintf.c: remove %Z support 2017-02-27 18:43:47 -08:00
cfg80211.h brcmfmac: drop unneeded function declarations from headers 2017-01-20 12:03:55 +02:00
chip.c brcmfmac: add support for the PCIE devices 43525 and 43465 2016-06-16 18:20:05 +03:00
chip.h brcmfmac: access PMU registers using standalone PMU core if available 2016-02-06 13:52:47 +02:00
common.c brcmfmac: switch to C function (__brcmf_err) for printing errors 2017-02-08 17:23:39 +02:00
common.h brcmfmac: move brcmf_c_set_joinpref_default declaration to common.h 2017-01-20 12:03:56 +02:00
commonring.c
commonring.h
core.c brcmfmac: Use net_device_stats from struct net_device 2017-02-15 11:15:16 +02:00
core.h brcmfmac: Use net_device_stats from struct net_device 2017-02-15 11:15:16 +02:00
debug.c brcmfmac: be more verbose when PSM's watchdog fires 2017-02-02 08:14:26 +02:00
debug.h brcmfmac: merge two remaining brcmf_err macros 2017-02-08 17:23:39 +02:00
feature.c brcmfmac: add 802.11w management frame protection support 2016-03-07 14:15:59 +02:00
feature.h brcmfmac: add 802.11w management frame protection support 2016-03-07 14:15:59 +02:00
firmware.c brcmfmac: insert default boardrev in nvram data if missing 2016-04-14 15:57:47 +03:00
firmware.h brcmfmac: fix BRCMF_FW_NVRAM_DEF macro for older gcc compilers 2016-01-18 11:20:52 -05:00
flowring.c brcmfmac: use correct skb freeing helper when deleting flowring 2016-09-27 18:47:55 +03:00
flowring.h brcmfmac: Increase nr of supported flowrings. 2016-02-25 11:59:22 +02:00
fweh.c brcmfmac: print name of connect status event 2016-11-17 08:44:35 +02:00
fweh.h brcmfmac: print name of connect status event 2016-11-17 08:44:35 +02:00
fwil.c brcmfmac: Return actual error by fwil. 2015-11-30 14:46:38 +02:00
fwil.h brcmfmac: add support for nl80211 BSS_SELECT feature 2016-04-26 12:14:27 +03:00
fwil_types.h brcmfmac: fix scheduled scan result handling for newer chips 2016-11-29 17:29:31 +02:00
fwsignal.c brcmfmac: proto: add callback for queuing TX data 2016-11-09 03:30:32 +02:00
fwsignal.h brcmfmac: proto: add callback for queuing TX data 2016-11-09 03:30:32 +02:00
Makefile Makefile: drop -D__CHECK_ENDIAN__ from cflags 2016-12-16 00:13:43 +02:00
msgbuf.c brcmfmac: add pcie host dongle interface rev6 support 2016-11-29 17:29:24 +02:00
msgbuf.h brcmfmac: add pcie host dongle interface rev6 support 2016-11-29 17:29:24 +02:00
of.c brcmfmac: make brcmf_of_probe more generic 2017-01-19 14:45:13 +02:00
of.h brcmfmac: make brcmf_of_probe more generic 2017-01-19 14:45:13 +02:00
p2p.c brcmfmac: use local iftype avoiding use-after-free of virtual interface 2017-03-30 19:43:51 +03:00
p2p.h brcmfmac: Check rtnl_lock is locked when removing interface 2016-08-24 16:13:47 +03:00
pcie.c brcmfmac: drop duplicated core selection from brcmf_pcie_attach 2017-01-28 08:34:40 +02:00
pcie.h
pno.c brcmfmac: fix uninitialized field in scheduled scan ssid configuration 2016-12-20 16:09:04 +02:00
pno.h brcmfmac: use requested scan interval in scheduled scan 2016-11-29 17:29:30 +02:00
proto.c brcmfmac: proto: add callback for queuing TX data 2016-11-09 03:30:32 +02:00
proto.h brcmfmac: proto: add callback for queuing TX data 2016-11-09 03:30:32 +02:00
sdio.c sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h> 2017-03-02 08:42:29 +01:00
sdio.h brcmfmac: Fix 'did not remove int handler' warning 2016-06-04 17:58:52 +03:00
tracepoint.c brcmfmac: add missing header dependencies 2016-09-03 13:10:13 +03:00
tracepoint.h
usb.c brcmfmac: rename brcmf_bus_start function to brcmf_bus_started 2017-01-20 12:03:57 +02:00
usb.h
vendor.c
vendor.h