Brian Norris 6c529d4d8b mac80211: don't WARN on short WMM parameters from AP ... commit 05aaa5c97d upstream. In a very similar spirit to commit c470bdc1aa ("mac80211: don't WARN on bad WMM parameters from buggy APs"), an AP may not transmit a fully-formed WMM IE. For example, it may miss or repeat an Access Category. The above loop won't catch that and will instead leave one of the four ACs zeroed out. This triggers the following warning in drv_conf_tx() wlan0: invalid CW_min/CW_max: 0/0 and it may leave one of the hardware queues unconfigured. If we detect such a case, let's just print a warning and fall back to the defaults. Tested with a hacked version of hostapd, intentionally corrupting the IEs in hostapd_eid_wmm(). Cc: stable@vger.kernel.org Signed-off-by: Brian Norris <briannorris@chromium.org> Link: https://lore.kernel.org/r/20190726224758.210953-1-briannorris@chromium.org Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-08-16 10:13:57 +02:00
..
6lowpan	6lowpan: iphc: reset mac_header after decompress to fix panic	2018-10-03 17:00:47 -07:00
9p	9p/virtio: Add cleanup path in p9_virtio_init	2019-07-31 07:28:39 +02:00
802
8021q	vlan: disable SIOCSHWTSTAMP in container	2019-05-16 19:42:34 +02:00
appletalk	appletalk: Fix use-after-free in atalk_proc_exit	2019-04-20 09:15:07 +02:00
atm	net: atm: Fix potential Spectre v1 vulnerabilities	2019-04-27 09:35:33 +02:00
ax25	ax25: fix inconsistent lock state in ax25_destroy_timer	2019-06-22 08:16:14 +02:00
batman-adv	batman-adv: fix for leaked TVLV handler.	2019-07-31 07:28:19 +02:00
bluetooth	Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug	2019-07-31 07:28:43 +02:00
bpf
bridge	net: bridge: mcast: don't delete permanent entries when fast leave is enabled	2019-08-09 17:53:34 +02:00
caif	caif: reduce stack size with KASAN	2019-05-08 07:20:45 +02:00
can	can: af_can: Fix error path of can_init()	2019-07-21 09:04:22 +02:00
ceph	libceph: wait for latest osdmap in ceph_monc_blacklist_add()	2019-03-27 14:13:51 +09:00
core	net: fix ifindex collision during namespace removal	2019-08-09 17:53:34 +02:00
dcb	net: dcb: For wild-card lookups, use priority -1, not 0	2018-09-19 22:43:43 +02:00
dccp	dccp: do not use ipv6 header for ipv4 flow	2019-04-03 06:25:08 +02:00
decnet
dns_resolver	KEYS: DNS: fix parsing multiple options	2018-07-22 14:28:49 +02:00
dsa	net: dsa: Fix error cleanup path in dsa_init_module	2019-05-16 19:42:34 +02:00
ethernet
hsr	net/hsr: fix possible crash in add_timer()	2019-03-19 13:13:22 +01:00
ieee802154	ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module	2019-04-27 09:35:40 +02:00
ife	net: sched: ife: check on metadata length	2018-04-29 11:33:13 +02:00
ipv4	netfilter: Fix rpfilter dropping vrf packets by mistake	2019-08-16 10:13:50 +02:00
ipv6	netfilter: Fix rpfilter dropping vrf packets by mistake	2019-08-16 10:13:50 +02:00
ipx
iucv	net/iucv: Free memory obtained by kzalloc	2018-03-31 18:10:41 +02:00
kcm	kcm: switch order of device registration to fix a crash	2019-04-17 08:37:45 +02:00
key	af_key: fix leaks in key_pol_get_resp and dump_sp.	2019-07-31 07:28:21 +02:00
l2tp	compat_ioctl: pppoe: fix PPPOEIOCSFWD handling	2019-08-09 17:53:35 +02:00
l3mdev
lapb	lapb: fixed leak of control-blocks.	2019-06-22 08:16:14 +02:00
llc	llc: fix skb leak in llc_build_and_send_ui_pkt()	2019-06-09 09:18:10 +02:00
mac80211	mac80211: don't WARN on short WMM parameters from AP	2019-08-16 10:13:57 +02:00
mac802154	net: mac802154: tx: expand tailroom if necessary	2018-09-09 19:55:52 +02:00
mpls	mpls: Return error for RTA_GATEWAY attribute	2019-03-13 14:03:09 -07:00
ncsi
netfilter	netfilter: nft_hash: fix symhash with modulus one	2019-08-16 10:13:51 +02:00
netlabel	netlabel: fix out-of-bounds memory accesses	2019-03-13 14:03:08 -07:00
netlink	genetlink: Fix a memory leak on error path	2019-04-03 06:25:08 +02:00
netrom	netrom: hold sock when setting skb->destructor	2019-07-31 07:28:46 +02:00
nfc	nfc: fix potential illegal memory access	2019-07-31 07:28:45 +02:00
nsh	nsh: set mac len based on inner packet	2018-07-22 14:28:49 +02:00
openvswitch	net: openvswitch: fix csum updates for MPLS actions	2019-07-31 07:28:45 +02:00
packet	net/packet: fix memory leak in packet_set_ring()	2019-07-03 13:16:01 +02:00
phonet	phonet: fix building with clang	2019-03-23 14:35:16 +01:00
psample
qrtr	net: qrtr: Broadcast messages only from control port	2018-08-24 13:09:13 +02:00
rds	net: rds: fix memory leak in rds_ib_flush_mr_pool	2019-06-11 12:21:45 +02:00
rfkill	rfkill: gpio: fix memory leak in probe error path	2018-05-16 10:10:26 +02:00
rose	net/rose: fix unbound loop in rose_loopback_timer()	2019-05-02 09:40:34 +02:00
rxrpc	rxrpc: Fix send on a connected, but unbound socket	2019-07-31 07:28:45 +02:00
sched	net: sched: Fix a possible null-pointer dereference in dequeue_func()	2019-08-09 17:53:35 +02:00
sctp	sctp: change to hold sk after auth shkey is created successfully	2019-07-03 13:16:02 +02:00
smc	net/smc: fix TCP fallback socket release	2019-01-09 17:14:46 +01:00
strparser	strparser: Remove early eaten to fix full tcp receive buffer stall	2018-07-22 14:28:47 +02:00
sunrpc	net :sunrpc :clnt :Fix xps refcount imbalance on the error path	2019-07-21 09:04:29 +02:00
switchdev
tipc	tipc: compat: allow tipc commands without arguments	2019-08-09 17:53:35 +02:00
tls	net/tls: Fixed return value when tls_complete_pending_work() fails	2018-12-05 19:41:11 +01:00
unix	missing barriers in some of unix_sock ->addr and ->path accesses	2019-03-19 13:13:24 +01:00
vmw_vsock	hv_sock: Add support for delayed close	2019-08-04 09:32:02 +02:00
wimax
wireless	cfg80211: fix memory leak of wiphy device name	2019-06-25 11:36:54 +08:00
x25	net/x25: fix a race in x25_bind()	2019-03-19 13:13:23 +01:00
xfrm	ipsec: select crypto ciphers for xfrm_algo	2019-07-31 07:28:27 +02:00
compat.c	sock: Make sock->sk_stamp thread-safe	2019-01-09 17:14:46 +01:00
Kconfig
Makefile
socket.c	net: socket: set sock->sk to NULL after calling proto_ops::release()	2019-03-13 14:03:09 -07:00
sysctl_net.c