Johannes Berg
df6d02300f
wext: fix potential private ioctl memory content leak
...
When a driver doesn't fill the entire buffer, old
heap contents may remain, and if it also doesn't
update the length properly, this old heap content
will be copied back to userspace.
It is very unlikely that this happens in any of
the drivers using private ioctls since it would
show up as junk being reported by iwpriv, but it
seems better to be safe here, so use kzalloc.
Reported-by: Jeff Mahoney <jeffm@suse.com>
Cc: stable@kernel.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2010-09-20 13:41:40 -04:00
..
.gitignore
chan.c
cfg80211: don't refuse HT20 channels on devices that don't support HT40
2010-06-02 16:13:17 -04:00
core.c
wireless: register wiphy rfkill w/o holding cfg80211_mutex
2010-08-31 14:48:47 -04:00
core.h
cfg80211: make action channel type optional
2010-06-02 16:13:27 -04:00
db.txt
debugfs.c
debugfs.h
ethtool.c
ethtool.h
genregdb.awk
wireless: correct sparse warning in generated regdb.c
2010-07-20 16:49:37 -04:00
ibss.c
cfg80211: fix IBSS default management key
2010-07-26 15:32:41 -04:00
Kconfig
lib80211.c
lib80211_crypt_ccmp.c
lib80211: remove unused host_build_iv option
2010-07-26 15:09:04 -04:00
lib80211_crypt_tkip.c
lib80211: remove unused host_build_iv option
2010-07-26 15:09:04 -04:00
lib80211_crypt_wep.c
lib80211: remove unused host_build_iv option
2010-07-26 15:09:04 -04:00
Makefile
mlme.c
cfg80211: fix locking in action frame TX
2010-08-09 15:18:57 -04:00
nl80211.c
nl80211: Fix memory leaks
2010-07-28 16:24:01 -04:00
nl80211.h
radiotap.c
reg.c
cfg80211: Update of regulatory request initiator handling
2010-07-28 16:24:01 -04:00
reg.h
wireless: move regulatory_init to .init.text
2010-06-18 15:11:13 -04:00
regdb.h
scan.c
cfg80211: don't get expired BSSes
2010-07-14 13:52:45 -04:00
sme.c
wireless: mark cfg80211_is_all_idle as static
2010-07-20 16:49:38 -04:00
sysfs.c
sysfs.h
util.c
bridge: use rx_handler_data pointer to store net_bridge_port pointer
2010-06-15 11:48:58 -07:00
wext-compat.c
wireless extensions: fix kernel heap content leak
2010-08-30 16:35:17 -04:00
wext-compat.h
wext-core.c
wireless extensions: fix kernel heap content leak
2010-08-30 16:35:17 -04:00
wext-priv.c
wext: fix potential private ioctl memory content leak
2010-09-20 13:41:40 -04:00
wext-proc.c
wext-sme.c
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 into for-davem
2010-05-11 14:24:55 -04:00
wext-spy.c