leandrof/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
d5f78f50ff
linux/drivers/net/wireless/ath/ath11k
History
Kees Cook c8bcd82a4e ath11k: Avoid memcpy() over-reading of he_cap 
In preparation for FORTIFY_SOURCE performing compile-time and run-time
field bounds checking for memcpy(), memmove(), and memset(), avoid
intentionally writing across neighboring array fields.

Since peer_he_cap_{mac,phy}info and he_cap_elem.{mac,phy}_cap_info are not
the same sizes, memcpy() was reading beyond field boundaries. Instead,
correctly cap the copy length and pad out any difference in size
(peer_he_cap_macinfo is 8 bytes whereas mac_cap_info is 6, and
peer_he_cap_phyinfo is 12 bytes whereas phy_cap_info is 11).

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20210616195410.1232119-1-keescook@chromium.org
2021-06-22 18:28:00 +03:00
..
ahb.c ath11k: Move qmi service_ins_id to hw_params 2021-02-17 11:32:10 +02:00
ahb.h ath11k: Remove rproc references from common core layer 2020-09-21 16:11:28 +03:00
ce.c ath11k: add CE interrupt support for QCN9074 2021-02-17 11:32:58 +02:00
ce.h ath11k: add CE interrupt support for QCN9074 2021-02-17 11:32:58 +02:00
core.c ath11k: Fix an error handling path in ath11k_core_fetch_board_data_api_n() 2021-06-15 17:02:03 +03:00
core.h ath11k: add support for WCN6855 2021-06-12 13:31:05 +03:00
dbring.c ath11k: hal: create hw_srng_config dynamically 2020-08-17 13:18:38 +03:00
dbring.h ath11k: Add direct buffer ring support 2020-06-15 17:21:52 +03:00
debug.c ath11k: refactor debugfs code into debugfs.c 2020-09-22 10:41:41 +03:00
debug.h ath11k: refactor debugfs code into debugfs.c 2020-09-22 10:41:41 +03:00
debugfs_htt_stats.c ath10k/ath11k: fix spelling mistake "requed" -> "requeued" 2021-05-24 08:34:46 +03:00
debugfs_htt_stats.h ath10k/ath11k: fix spelling mistake "requed" -> "requeued" 2021-05-24 08:34:46 +03:00
debugfs_sta.c ath11k: debugfs: move some function declarations to correct header files 2020-09-22 10:41:49 +03:00
debugfs_sta.h ath11k: debugfs: move some function declarations to correct header files 2020-09-22 10:41:49 +03:00
debugfs.c ath11k: fix rmmod failure if qmi sequence fails 2020-12-09 09:00:29 +02:00
debugfs.h ath11k: fix undefined reference to 'ath11k_debugfs_htt_ext_stats_handler' 2020-09-25 19:09:48 +03:00
dp_rx.c ath11k: Drop multicast fragments 2021-05-11 20:16:30 +02:00
dp_rx.h ath11k: Clear the fragment cache during key install 2021-05-11 20:16:21 +02:00
dp_tx.c ath11k: add extended interrupt support for QCN9074 2021-02-17 11:33:04 +02:00
dp_tx.h
dp.c ath11k: setup REO for WCN6855 2021-06-12 13:31:02 +03:00
dp.h ath11k: implement suspend for QCA6390 PCI devices 2020-12-12 06:41:44 +02:00
hal_desc.h ath11k: add hal support for QCN9074 2021-02-17 11:32:48 +02:00
hal_rx.c ath11k: add support to get peer id for WCN6855 2021-06-12 13:31:04 +03:00
hal_rx.h ath11k: add support to get peer id for WCN6855 2021-06-12 13:31:04 +03:00
hal_tx.c ath11k: add data path support for QCN9074 2021-02-17 11:32:51 +02:00
hal_tx.h ath11k: add hal support for QCN9074 2021-02-17 11:32:48 +02:00
hal.c ath11k: setup WBM_IDLE_LINK ring once again 2021-06-12 13:31:03 +03:00
hal.h ath11k: setup REO for WCN6855 2021-06-12 13:31:02 +03:00
hif.h ath11k: add CE interrupt support for QCN9074 2021-02-17 11:32:58 +02:00
htc.c ath11k: set credit_update flag for flow controlled ep only 2020-12-12 06:41:34 +02:00
htc.h ath11k: htc: implement suspend handling 2020-12-12 06:41:28 +02:00
hw.c ath11k: add support to get peer id for WCN6855 2021-06-12 13:31:04 +03:00
hw.h ath11k: don't call ath11k_pci_set_l1ss for WCN6855 2021-06-12 13:31:05 +03:00
Kconfig ath11k: use remoteproc only with AHB devices 2020-08-17 13:07:17 +03:00
mac.c ath11k: Avoid memcpy() over-reading of he_cap 2021-06-22 18:28:00 +03:00
mac.h ath11k: Add support for STA to handle beacon miss 2021-03-09 13:02:16 +02:00
Makefile ath11k: implement WoW enable and wakeup commands 2020-12-12 06:41:37 +02:00
mhi.c ath11k: add support for WCN6855 2021-06-12 13:31:05 +03:00
mhi.h ath11k: mhi: hook suspend and resume 2020-12-12 06:41:16 +02:00
pci.c ath11k: Enable QCN9074 device 2021-06-19 12:15:11 +03:00
pci.h ath11k: add hal support for QCN9074 2021-02-17 11:32:48 +02:00
peer.c ath11k: Update tx descriptor search index properly 2021-02-09 09:22:52 +02:00
peer.h ath11k: Update tx descriptor search index properly 2021-02-09 09:22:52 +02:00
qmi.c ath11k: qmi: Fix spelling mistake "requeqst" -> "request" 2021-04-22 17:01:44 +03:00
qmi.h ath11k: Add qcn9074 mhi controller config 2021-02-17 11:32:40 +02:00
reg.c cfg80211: avoid holding the RTNL when calling the driver 2021-01-26 11:55:50 +01:00
reg.h ath11k: Add new dfs region name for JP 2020-11-07 10:06:12 +02:00
rx_desc.h ath11k: add dp support for WCN6855 2021-06-12 13:31:02 +03:00
spectral.c ath11k: make relay callbacks const 2020-12-15 22:46:18 -08:00
spectral.h ath11k: add support for spectral scan 2020-06-15 17:21:54 +03:00
testmode_i.h
testmode.c ath11k: remove repeated words in comments and warnings 2020-10-28 15:44:04 +02:00
testmode.h
thermal.c net: ath11k: constify ath11k_thermal_ops 2020-08-26 16:21:17 -07:00
thermal.h ath11k: fix compiler warnings without CONFIG_THERMAL 2020-04-06 17:21:23 +03:00
trace.c
trace.h ath11k: remove h from printk format specifier 2021-02-04 09:39:10 +02:00
wmi.c ath10k/ath11k: fix spelling mistake "requed" -> "requeued" 2021-05-24 08:34:46 +03:00
wmi.h ath10k/ath11k: fix spelling mistake "requed" -> "requeued" 2021-05-24 08:34:46 +03:00
wow.c ath11k: implement WoW enable and wakeup commands 2020-12-12 06:41:37 +02:00
wow.h ath11k: implement WoW enable and wakeup commands 2020-12-12 06:41:37 +02:00