linux-stable/drivers/net/wireless/wl12xx
Luciano Coelho f414218ed8 wl12xx: don't write out of bounds when hlid > WL12XX_MAX_LINKS
We should not get an hlid value bigger than WL12XX_MAX_LINKS from
wl1271_rx_handle_data().  We have a WARN_ON in case it happens.  But
despite the warning, we would still go ahead and write the hlid bit
into active_hlids (a stack variable).  This would cause us to
overwrite other data in the stack.

To avoid this problem, we now skip the write when issuing the warning,
so at least we don't corrupt data.

Signed-off-by: Luciano Coelho <coelho@ti.com>
2011-12-15 09:58:41 +02:00
..
acx.c wl12xx: move debugging definitions to a separate file 2011-10-11 16:19:05 +03:00
acx.h wl12xx: use dynamic rate policies 2011-10-11 15:28:02 +03:00
boot.c wl12xx: Check buffer bound when processing nvs data 2011-12-01 15:55:42 +02:00
boot.h
cmd.c wl12xx: Validate FEM index from ini file and FW 2011-12-01 15:55:42 +02:00
cmd.h wl12xx: couple role_start_dev with roc 2011-11-08 15:36:45 +02:00
conf.h wl12xx: set scan probe requests rate according to the no_cck flag 2011-11-08 15:50:09 +02:00
debug.h wl12xx: move debugging definitions to a separate file 2011-10-11 16:19:05 +03:00
debugfs.c wl12xx: add vifs_state debugfs key 2011-11-08 15:36:46 +02:00
debugfs.h
event.c wl12xx: keep beacon-filtering enabled during STA operation 2011-11-08 15:36:46 +02:00
event.h wl12xx: move ap_hlid_map into wlvif.ap 2011-10-07 08:33:46 +03:00
ini.h
init.c wl12xx: init CMD_TEMPL_KLV to sizeof(ieee80211_qos_hdr) 2011-12-01 15:55:49 +02:00
init.h wl12xx: define wl12xx_vif 2011-10-07 08:32:33 +03:00
io.c wl12xx: move debugging definitions to a separate file 2011-10-11 16:19:05 +03:00
io.h wl12xx: mark some symbols static 2011-10-11 16:01:14 +03:00
Kconfig wl12xx: remove sdio_test module 2011-10-11 16:00:38 +03:00
main.c wl12xx: remove redundant commands from plt init 2011-12-08 12:32:36 +02:00
Makefile wl12xx: remove sdio_test module 2011-10-11 16:00:38 +03:00
ps.c wl12xx: keep beacon-filtering enabled during STA operation 2011-11-08 15:36:46 +02:00
ps.h wl12xx: replace all remaining wl->vif references 2011-10-11 15:12:13 +03:00
reg.h wl12xx: increase firmware upload chunk size 2011-11-08 15:36:53 +02:00
rx.c wl12xx: don't write out of bounds when hlid > WL12XX_MAX_LINKS 2011-12-15 09:58:41 +02:00
rx.h wl12xx: update rx/tx 2011-08-22 12:35:25 +03:00
scan.c wl12xx: minor fix in sched_scan_ssid_list 2011-12-08 12:32:40 +02:00
scan.h wl12xx: move bss_type into wlvif 2011-10-07 08:32:37 +03:00
sdio.c wl12xx: fix SDIO suspend/resume 2011-11-08 16:00:35 +02:00
spi.c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into wl12xx-next 2011-12-01 12:14:48 +02:00
testmode.c wl12xx: Restore testmode ABI 2011-12-15 09:58:41 +02:00
testmode.h
tx.c wl12xx: silence tx_attr uninitialized warning in wl1271_tx_fill_hdr 2011-12-09 14:57:49 -05:00
tx.h wl12xx: rearm rx streaming per vif 2011-10-11 15:09:57 +03:00
wl12xx.h wl12xx: configure probe-resp template according to notification 2011-12-01 15:55:46 +02:00
wl12xx_80211.h wl12xx: init CMD_TEMPL_KLV to sizeof(ieee80211_qos_hdr) 2011-12-01 15:55:49 +02:00
wl12xx_platform_data.c wl12xx: move common init code from bus modules to main 2011-10-11 16:01:09 +03:00