mirror/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
d837a2ae40fd37bcbb5a42126e3d89c68c90fccc
linux/drivers
History
Bing Zhao d837a2ae40 mwifiex: fix use-after-free in beacon_ie processing 
beacon_ie buffer is allocated in mwifiex_fill_new_bss_desc()
and the buffer pointer is saved in bss_desc->beacon_buf.
beacon_ie is freed before the function returns. However,
bss_desc->beacon_buf is still being accessed afterwards.

Fix it by freeing beacon_ie (bss_desc->beacon_buf) in
caller's scope.

Reviewed-by: Doug Anderson <dianders@chromium.org>
Reviewed-by: Paul Stewart <pstew@chromium.org>
Signed-off-by: Bing Zhao <bzhao@marvell.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2013-04-22 15:38:35 -04:00
..
accessibility
…
acpi
x86, ACPI, mm: Revert movablemem_map support
2013-03-02 09:34:39 -08:00
amba
Merge branch 'for-linus' of git://git.linaro.org/people/rmk/linux-arm
2013-03-03 11:54:39 -08:00
ata
Merge tag 'upstream-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jgarzik/libata-dev
2013-02-24 17:32:15 -08:00
atm
hlist: drop the node parameter from iterators
2013-02-27 19:10:24 -08:00
auxdisplay
…
base
CHROMIUM: dma-buf: restore args on failure of dma_buf_mmap
2013-02-27 15:14:02 +05:30
bcma
bcma: export some gpio functions
2013-03-27 13:39:09 -04:00
block
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client
2013-02-28 17:43:09 -08:00
bluetooth
Bluetooth: Use separate function for BCM92035 vendor setup
2013-04-11 16:34:10 -03:00
bus
…
cdrom
…
char
hw_random: make buffer usable in scatterlist.
2013-03-05 10:11:41 +10:30
clk
hlist: drop the node parameter from iterators
2013-02-27 19:10:24 -08:00
clocksource
Merge tag 'metag-v3.9-rc1-v4' of git://git.kernel.org/pub/scm/linux/kernel/git/jhogan/metag
2013-03-03 12:06:09 -08:00
connector
proc connector: reject unprivileged listener bumps
2013-02-27 13:08:35 -05:00
cpufreq
Merge tag 'pm+acpi-fixes-3.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2013-02-25 21:25:17 -08:00
cpuidle
Merge tag 'soc' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
2013-02-21 15:27:22 -08:00
crypto
Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2013-02-25 15:56:15 -08:00
dca
dca: convert to idr_alloc()
2013-02-27 19:10:15 -08:00
devfreq
…
dio
…
dma
Merge branch 'next' of git://git.infradead.org/users/vkoul/slave-dma
2013-03-03 10:20:22 -08:00
edac
Merge branch 'linux_next' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-edac
2013-02-28 20:42:33 -08:00
eisa
…
extcon
Merge tag 'char-misc-3.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2013-02-21 13:57:13 -08:00
firewire
firewire: convert to idr_alloc()
2013-02-27 19:10:15 -08:00
firmware
Merge branch 'x86-efi-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2013-02-27 16:17:42 -08:00
gpio
gpio/gpio-ich: fix ichx_gpio_check_available() return what callers expect
2013-03-02 13:20:21 +00:00
gpu
hlist: drop the node parameter from iterators
2013-02-27 19:10:24 -08:00
hid
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2013-02-26 20:16:07 -08:00
hsi
hsi: fix kernel-doc warnings
2013-03-01 13:39:00 -08:00
hv
Drivers: hv: vmbus: Use the new infrastructure for delivering VMBUS interrupts
2013-02-27 10:15:53 -08:00
hwmon
Merge tag 'pm+acpi-3.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2013-02-20 11:26:56 -08:00
hwspinlock
…
i2c
idr: remove MAX_IDR_MASK and move left MAX_IDR_* into idr.c
2013-02-27 19:10:20 -08:00
ide
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2013-02-26 20:16:07 -08:00
idle
Merge branch 'core-locking-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2013-02-22 19:25:09 -08:00
iio
Merge tag 'staging-3.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging
2013-02-21 12:11:44 -08:00
infiniband
hlist: drop the node parameter from iterators
2013-02-27 19:10:24 -08:00
input
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux
2013-03-03 12:58:43 -08:00
iommu
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2013-02-26 20:16:07 -08:00
ipack
Merge tag 'char-misc-3.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2013-02-21 13:57:13 -08:00
irqchip
Merge tag 'metag-v3.9-rc1-v4' of git://git.kernel.org/pub/scm/linux/kernel/git/jhogan/metag
2013-03-03 12:06:09 -08:00
isdn
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2013-03-05 18:42:29 -08:00
leds
Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/cooloney/linux-leds
2013-02-26 09:29:02 -08:00
lguest
Merge tag 'virtio-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux
2013-02-26 14:49:12 -08:00
macintosh
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/benh/powerpc
2013-02-23 17:09:55 -08:00
mailbox
…
md
Merge tag 'md-3.9' of git://neil.brown.name/md
2013-03-05 17:22:08 -08:00
media
Merge tag 'late-omap' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
2013-02-28 20:00:40 -08:00
memory
…
memstick
memstick: move the dereference below the NULL test
2013-02-27 19:10:23 -08:00
message
…
mfd
mfd: convert to idr_alloc()
2013-02-27 19:10:17 -08:00
misc
Merge tag 'for_linux-3.9' of git://git.kernel.org/pub/scm/linux/kernel/git/jwessel/kgdb
2013-03-02 08:31:39 -08:00
mmc
Merge branches 'devel-stable', 'fixes' and 'mmci' into for-linus
2013-03-03 00:32:50 +00:00
mtd
Merge tag 'for-linus-20130301' of git://git.infradead.org/linux-mtd
2013-03-02 16:33:54 -08:00
net
mwifiex: fix use-after-free in beacon_ie processing
2013-04-22 15:38:35 -04:00
nfc
NFC: pn544: Add MEI physical layer
2013-04-16 00:39:41 +02:00
ntb
…
nubus
…
of
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial
2013-02-21 17:40:58 -08:00
oprofile
oprofilefs: add missing ->i_mutex locking in object creation
2013-02-22 23:31:38 -05:00
parisc
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2013-02-26 20:16:07 -08:00
parport
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux
2013-02-21 17:54:03 -08:00
pci
hlist: drop the node parameter from iterators
2013-02-27 19:10:24 -08:00
pcmcia
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial
2013-02-21 17:40:58 -08:00
pinctrl
Merge tag 'dt' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
2013-02-21 15:38:49 -08:00
platform
Merge branch 'for_linus' of git://cavan.codon.org.uk/platform-drivers-x86
2013-03-03 10:16:19 -08:00
pnp
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2013-02-26 20:16:07 -08:00
power
power: convert to idr_alloc()
2013-02-27 19:10:18 -08:00
pps
drivers/pps/clients/pps-gpio.c: use devm_kzalloc
2013-02-27 19:10:23 -08:00
ps3
…
ptp
…
pwm
Merge tag 'for-3.9-rc1' of git://gitorious.org/linux-pwm/linux-pwm
2013-02-26 09:34:29 -08:00
rapidio
…
regulator
Merge remote-tracking branch 'regulator/topic/tps65090' into regulator-next
2013-02-19 12:43:12 +00:00
remoteproc
remoteproc: convert to idr_alloc()
2013-02-27 19:10:18 -08:00
rpmsg
rpmsg: convert to idr_alloc()
2013-02-27 19:10:18 -08:00
rtc
rtc: stmp3xxx: add wdt-accessor function
2013-03-01 12:40:36 +01:00
s390
qdio: remove unused parameters
2013-02-28 09:37:12 +01:00
sbus
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2013-02-26 20:16:07 -08:00
scsi
Merge tag 'scsi-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi
2013-03-02 11:42:16 -08:00
sfi
…
sh
…
sn
…
spi
Merge tag 'soc' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
2013-02-21 15:27:22 -08:00
ssb
ssb: read additional sprom v2 and v3 attributes.
2013-03-25 16:46:56 -04:00
staging
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2013-03-03 13:23:03 -08:00
target
Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending
2013-03-02 11:43:27 -08:00
tc
…
thermal
Fix mis-merge of intel_powerclamp.c resulting in compile error
2013-02-28 20:23:09 -08:00
tty
drivers/tty/hvc: Use strlcpy instead of strncpy
2013-03-05 16:56:27 +11:00
uio
uio: convert to idr_alloc()
2013-02-27 19:10:19 -08:00
usb
Merge tag 'usb-3.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb
2013-03-03 10:24:57 -08:00
uwb
…
vfio
vfio: convert to idr_alloc()
2013-02-27 19:10:19 -08:00
vhost
Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending
2013-02-26 11:42:23 -08:00
video
backlight: add new lp8788 backlight driver
2013-02-27 19:10:09 -08:00
virt
…
virtio
Merge tag 'virtio-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux
2013-02-26 14:49:12 -08:00
vlynq
…
vme
vme: add missing put_device() after device_register() fails
2013-02-14 09:24:14 -08:00
w1
Merge tag 'late-dt' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc
2013-02-28 19:59:34 -08:00
watchdog
watchdog: sp805_wdt depends on ARM
2013-03-01 12:56:26 +01:00
xen
Merge tag 'stable/for-linus-3.9-rc1-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen
2013-03-03 14:22:53 -08:00
zorro
new helper: file_inode(file)
2013-02-22 23:31:31 -05:00
Kconfig
Merge tag 'char-misc-3.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2013-02-21 13:57:13 -08:00
Makefile
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/benh/powerpc
2013-02-23 17:09:55 -08:00