linux/drivers/net/wireless/ath/ath6kl
Mohammed Shafi Shajakhan 9d0e2f0772 ath6kl: Fix invalid pointer access on fuzz testing with AP mode
In our Fuz testing, reference client corrupts the dest mac to "00:00:00:00:00:00"
in the WPA2 handshake no 2. During driver init the sta_list entries mac
addresses are by default "00:00:00:00:00:00". Driver returns an invalid
pointer (conn) and the drver shall crash, if rxtids (aggr_conn)
skb queues are accessed, since they would not be initialized.

Signed-off-by: Mohammed Shafi Shajakhan <mohammed@qca.qualcomm.com>
Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>
2013-08-07 10:58:59 +03:00
..
bmi.c ath6kl: alignment should match open parenthesis 2012-03-07 20:03:57 +02:00
bmi.h ath6kl: make ath6kl_bmi_[read|write]_hi32() endian safe 2012-03-07 20:04:00 +02:00
cfg80211.c ath6kl: make mgmt_tx accept a NULL channel 2013-06-11 15:01:36 +02:00
cfg80211.h ath6kl: Move and rename ath6kl_cleanup_vif function 2012-11-27 21:44:28 +02:00
common.h ath6kl: Configure htcap in fw based on the channel type in AP mode 2012-04-09 18:25:56 +03:00
core.c ath6kl: Make fw error recovery configurable 2012-10-24 11:49:49 +03:00
core.h ath6kl: cleanup ath6kl_reset_device() 2013-03-18 13:37:46 +02:00
debug.c wireless: ath6kl: re-use native helper to parse MAC 2013-06-01 15:11:52 +03:00
debug.h ath6kl: add tracing support to log functions 2013-03-18 13:44:16 +02:00
hif-ops.h ath6kl: Add HTC pipe implementation 2012-03-26 16:36:46 +03:00
hif.c ath6kl: add tracing point for hif irqs 2013-03-18 13:42:21 +02:00
hif.h ath6kl: Add HTC pipe implementation 2012-03-26 16:36:46 +03:00
htc-ops.h ath6kl: add htc ops 2012-03-26 16:36:46 +03:00
htc.h ath6kl: Add HTC pipe implementation 2012-03-26 16:36:46 +03:00
htc_mbox.c ath6kl: adding tracing points for htc_mbox 2013-03-18 13:42:21 +02:00
htc_pipe.c ath6kl: cold reset target after host warm boot 2013-03-18 13:38:37 +02:00
init.c ath6kl: Fix race in heart beat polling 2013-08-07 10:53:36 +03:00
Kconfig Merge tag 'for-linville-20130318' of git://github.com/kvalo/ath6kl 2013-03-18 16:34:55 -04:00
main.c ath6kl: Fix invalid pointer access on fuzz testing with AP mode 2013-08-07 10:58:59 +03:00
Makefile ath6kl: add tracing support and tracing points for wmi packets 2013-03-18 13:42:20 +02:00
recovery.c ath6kl: Make fw error recovery configurable 2012-10-24 11:49:49 +03:00
sdio.c ath6kl: Unify sg_sz and buf_sz in ath6kl_sdio_alloc_prep_scat_req() 2013-06-01 15:16:33 +03:00
target.h ath6kl: cleanup ath6kl_reset_device() 2013-03-18 13:37:46 +02:00
testmode.c ath6kl: Stop using NLA_PUT*(). 2012-04-02 04:33:44 -04:00
testmode.h ath6kl: Update license header 2012-02-08 11:31:31 +02:00
trace.c ath6kl: add tracing points for sdio transfers 2013-03-18 13:42:20 +02:00
trace.h ath6kl: fix size_t printf warnings 2013-03-20 08:55:26 -04:00
txrx.c ath6kl: remove false check from ath6kl_rx() 2013-03-18 13:50:19 +02:00
usb.c ath6kl: Fix a suspend/resume crash in AR6004 USB 2013-06-01 15:14:41 +03:00
wmi.c ath6kl: add an extra band check to ath6kl_wmi_beginscan_cmd() 2013-03-18 13:50:19 +02:00
wmi.h ath6kl: Parse beacon interval from userspace 2012-11-27 21:44:28 +02:00