1
linux/drivers/net/wireless
Gertjan van Wingerde a26cbc6508 rt2x00: Fix double usage of skb->cb in USB RX path.
It is not safe to use the skb->cb area for both the rxd and
skb_frame_desc data at the same time, while they occupy an overlapping
piece of memory. This can lead to hard to trace crashes as pointers
within skb_frame_desc are pointing into nowhere, or the rxd data is
overwritten with non-sense.

Fix it by copying the rxd to a small buffer on the stack.

Signed-off-by: Gertjan van Wingerde <gwingerde@kpnplanet.nl>
Signed-off-by: Ivo van Doorn <IvDoorn@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2008-06-14 12:17:57 -04:00
..
ath5k ath5k: use IEEE80211_SKB_CB 2008-06-03 15:00:16 -04:00
b43 Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2008-06-10 02:22:26 -07:00
b43legacy Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2008-06-10 02:22:26 -07:00
hostap hostap_cs: add ID for Conceptronic CON11CPro 2008-05-20 17:55:30 -04:00
iwlwifi Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2008-06-10 02:22:26 -07:00
libertas Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2008-06-10 02:22:26 -07:00
p54 Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2008-06-10 02:22:26 -07:00
prism54 prism54: fix regression with missing carrier in AP-mode 2008-05-12 21:18:04 -04:00
rt2x00 rt2x00: Fix double usage of skb->cb in USB RX path. 2008-06-14 12:17:57 -04:00
zd1211rw Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2008-06-10 02:22:26 -07:00
adm8211.c mac80211: move TX info into skb->cb 2008-05-21 21:48:11 -04:00
adm8211.h mac80211: move TX info into skb->cb 2008-05-21 21:48:11 -04:00
airo_cs.c
airo.c Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2008-06-10 02:22:26 -07:00
airo.h
airport.c
arlan-main.c arlan: use netstats in net_device structure 2008-05-14 16:29:48 -04:00
arlan-proc.c
arlan.h arlan: use netstats in net_device structure 2008-05-14 16:29:48 -04:00
atmel_cs.c
atmel_pci.c
atmel.c Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2008-06-10 02:22:26 -07:00
atmel.h
hermes_rid.h
hermes.c
hermes.h
i82586.h
i82593.h
ipw2100.c
ipw2100.h
ipw2200.c ipw2200: queue direct scans 2008-06-09 15:50:16 -04:00
ipw2200.h ipw2200: queue direct scans 2008-06-09 15:50:16 -04:00
Kconfig
Makefile iwlwifi: Allow building iwl3945 without iwl4965. 2008-04-27 15:38:30 -07:00
netwave_cs.c
orinoco_cs.c orinoco_cs: add ID for SpeedStream wireless adapters 2008-05-20 17:55:30 -04:00
orinoco_nortel.c
orinoco_pci.c
orinoco_pci.h
orinoco_plx.c
orinoco_tmd.c
orinoco.c
orinoco.h
ray_cs.c
ray_cs.h
rayctl.h
rndis_wlan.c Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2008-06-10 02:22:26 -07:00
rtl818x.h
rtl8180_dev.c mac80211: use multi-queue master netdevice 2008-05-21 21:48:14 -04:00
rtl8180_grf5101.c rtl8180: fix wrong parameter in grf5101_rf_set_channel 2008-05-28 16:43:40 -04:00
rtl8180_grf5101.h
rtl8180_max2820.c rtl8180: fix wrong parameter in max2820_rf_set_channel 2008-05-28 16:43:39 -04:00
rtl8180_max2820.h
rtl8180_rtl8225.c
rtl8180_rtl8225.h
rtl8180_sa2400.c rtl8180: fix wrong parameter in sa2400_rf_set_channel 2008-05-28 16:43:38 -04:00
rtl8180_sa2400.h
rtl8180.h
rtl8187_dev.c Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/linville/wireless-next-2.6 2008-06-10 01:54:31 -07:00
rtl8187_rtl8225.c
rtl8187_rtl8225.h
rtl8187.h mac80211: move TX info into skb->cb 2008-05-21 21:48:11 -04:00
spectrum_cs.c
strip.c strip: Fix termios assumption 2008-05-12 07:27:38 -07:00
wavelan_cs.c wavelan: avoid index past end of array if DEBUG_SHOW_UNUSED is defined 2008-05-12 21:18:05 -04:00
wavelan_cs.h
wavelan_cs.p.h
wavelan.c wavelan: avoid index past end of array if DEBUG_SHOW_UNUSED is defined 2008-05-12 21:18:05 -04:00
wavelan.h
wavelan.p.h
wl3501_cs.c
wl3501.h
zd1201.c
zd1201.h