Arunk Khandavalli 7445b71128 cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE ... [ Upstream commit 4f0223bfe9c3e62d8f45a85f1ef1b18a8a263ef9 ] nl80211_update_ft_ies() tried to validate NL80211_ATTR_IE with is_valid_ie_attr() before dereferencing it, but that helper function returns true in case of NULL pointer (i.e., attribute not included). This can result to dereferencing a NULL pointer. Fix that by explicitly checking that NL80211_ATTR_IE is included. Fixes: 355199e02b ("cfg80211: Extend support for IEEE 802.11r Fast BSS Transition") Signed-off-by: Arunk Khandavalli <akhandav@codeaurora.org> Signed-off-by: Jouni Malinen <jouni@codeaurora.org> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Sasha Levin <alexander.levin@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-10-10 08:52:11 +02:00
..
.gitignore
ap.c
chan.c
core.c	cfg80211: limit wiphy names to 128 bytes	2018-05-26 08:49:00 +02:00
core.h	cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts	2017-01-09 08:07:42 +01:00
db.txt
debugfs.c
debugfs.h
ethtool.c
genregdb.awk
ibss.c
Kconfig
lib80211.c
lib80211_crypt_ccmp.c
lib80211_crypt_tkip.c
lib80211_crypt_wep.c
Makefile
mesh.c
mlme.c	cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts	2017-01-09 08:07:42 +01:00
nl80211.c	cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE	2018-10-10 08:52:11 +02:00
nl80211.h
ocb.c
radiotap.c
rdev-ops.h
reg.c
reg.h
regdb.h
scan.c	cfg80211: limit scan results cache size	2016-12-02 09:09:01 +01:00
sme.c	cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts	2017-01-09 08:07:42 +01:00
sysfs.c
sysfs.h
trace.c
trace.h
util.c
wext-compat.c
wext-compat.h
wext-core.c
wext-priv.c
wext-proc.c
wext-sme.c
wext-spy.c