linux/drivers/net/wireless/ipw2x00
Stanislav Yakovlev bf11315eed net/wireless: ipw2200: Fix panic occurring in ipw_handle_promiscuous_tx()
The driver does not count space of radiotap fields when allocating skb for
radiotap packet. This leads to kernel panic with the following call trace:

...
[67607.676067] [<c152f90f>] error_code+0x67/0x6c
[67607.676067] [<c142f831>] ? skb_put+0x91/0xa0
[67607.676067] [<f8cf5e5b>] ? ipw_handle_promiscuous_tx+0x16b/0x2d0 [ipw2200]
[67607.676067] [<f8cf5e5b>] ipw_handle_promiscuous_tx+0x16b/0x2d0 [ipw2200]
[67607.676067] [<f8cf899b>] ipw_net_hard_start_xmit+0x8b/0x90 [ipw2200]
[67607.676067] [<f8741c5a>] libipw_xmit+0x55a/0x980 [libipw]
[67607.676067] [<c143d3e8>] dev_hard_start_xmit+0x218/0x4d0
...

This bug was found by VittGam.
https://bugzilla.kernel.org/show_bug.cgi?id=43255

Cc: stable@kernel.org
Signed-off-by: Stanislav Yakovlev <stas.yakovlev@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2012-10-15 14:45:52 -04:00
..
Kconfig
Makefile
ipw.h net/wireless: ipw2x00: add supported cipher suites to wiphy initialization 2012-04-12 15:10:48 -04:00
ipw2100.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next 2012-10-02 13:38:27 -07:00
ipw2100.h Merge branch 'master' into for-davem 2012-04-12 14:41:59 -04:00
ipw2200.c net/wireless: ipw2200: Fix panic occurring in ipw_handle_promiscuous_tx() 2012-10-15 14:45:52 -04:00
ipw2200.h net/wireless: ipw2x00: remove unused definitions for regulatory domain 2012-03-12 14:19:37 -04:00
libipw.h net/wireless: ipw2x00: remove unused libipw_measurement_report struct 2012-04-11 16:24:00 -04:00
libipw_geo.c
libipw_module.c drivers/net: Remove alloc_etherdev error messages 2012-01-31 16:20:48 -05:00
libipw_rx.c drivers/net: Convert compare_ether_addr to ether_addr_equal 2012-05-10 23:33:01 -04:00
libipw_tx.c ipw2x00: comment typo fix encryptiong to encryption 2011-09-15 14:20:31 +02:00
libipw_wx.c ipw2x00: silence GCC warning for unused variable 'dev' 2012-09-24 15:02:08 -04:00