android_kernel_oneplus_msm8998/drivers/net/wireless
Johan Hovold 670a7c5db2 ath9k_htc: fix NULL-deref at probe
commit ebeb36670ecac36c179b5fb5d5c88ff03ba191ec upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer or accessing memory beyond the endpoint array should a
malicious device lack the expected endpoints.

Fixes: 36bcce4306 ("ath9k_htc: Handle storage devices")
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-05-25 14:30:09 +02:00
..
ath ath9k_htc: fix NULL-deref at probe 2017-05-25 14:30:09 +02:00
b43
b43legacy
brcm80211 mac80211: pass block ack session timeout to to driver 2017-05-20 14:27:03 +02:00
cw1200 mac80211: pass block ack session timeout to to driver 2017-05-20 14:27:03 +02:00
hostap hostap: avoid uninitialized variable use in hfa384x_get_rid 2017-04-30 05:49:28 +02:00
ipw2x00
iwlegacy mac80211: pass block ack session timeout to to driver 2017-05-20 14:27:03 +02:00
iwlwifi mac80211: pass block ack session timeout to to driver 2017-05-20 14:27:03 +02:00
libertas
libertas_tf
mediatek mac80211: pass block ack session timeout to to driver 2017-05-20 14:27:03 +02:00
mwifiex mwifiex: pcie: fix cmd_buf use-after-free in remove/reset 2017-05-25 14:30:08 +02:00
orinoco
p54
prism54
realtek rtlwifi: rtl8821ae: setup 8812ae RFE according to device type 2017-05-25 14:30:08 +02:00
rsi mac80211: pass block ack session timeout to to driver 2017-05-20 14:27:03 +02:00
rt2x00 mac80211: pass block ack session timeout to to driver 2017-05-20 14:27:03 +02:00
ti wlcore: Add RX_BA_WIN_SIZE_CHANGE_EVENT event 2017-05-20 14:27:03 +02:00
zd1211rw
adm8211.c
adm8211.h
airo.c
airo.h
airo_cs.c
at76c50x-usb.c
at76c50x-usb.h
atmel.c
atmel.h
atmel_cs.c
atmel_pci.c
Kconfig
mac80211_hwsim.c mac80211: pass block ack session timeout to to driver 2017-05-20 14:27:03 +02:00
mac80211_hwsim.h
Makefile
mwl8k.c mac80211: pass block ack session timeout to to driver 2017-05-20 14:27:03 +02:00
ray_cs.c
ray_cs.h
rayctl.h
rndis_wlan.c
wl3501.h
wl3501_cs.c
zd1201.c
zd1201.h