1. 04 2月, 2011 1 次提交
  2. 06 1月, 2011 2 次提交
  3. 21 12月, 2010 3 次提交
  4. 14 12月, 2010 2 次提交
  5. 09 12月, 2010 1 次提交
  6. 08 12月, 2010 1 次提交
  7. 07 12月, 2010 3 次提交
  8. 30 11月, 2010 2 次提交
  9. 25 11月, 2010 1 次提交
  10. 19 11月, 2010 1 次提交
  11. 17 11月, 2010 2 次提交
  12. 14 10月, 2010 1 次提交
  13. 12 10月, 2010 1 次提交
  14. 08 10月, 2010 1 次提交
  15. 07 10月, 2010 2 次提交
  16. 06 10月, 2010 3 次提交
  17. 17 9月, 2010 2 次提交
  18. 28 8月, 2010 3 次提交
  19. 26 8月, 2010 2 次提交
  20. 25 8月, 2010 2 次提交
  21. 17 8月, 2010 2 次提交
  22. 28 7月, 2010 1 次提交
    • J
      mac80211: Fix key freeing to handle unlinked keys · 32162a4d
      Jouni Malinen 提交于
      Key locking simplification removed key->sdata != NULL verification from
      ieee80211_key_free(). While that is fine for most use cases, there is one
      path where this function can be called with an unlinked key (i.e.,
      key->sdata == NULL && key->local == NULL). This results in a NULL pointer
      dereference with the current implementation. This is known to happen at
      least with FT protocol when wpa_supplicant tries to configure the key
      before association.
      
      Avoid the issue by passing in the local pointer to
      ieee80211_key_free(). In addition, do not clear the key from hw_accel
      or debugfs if it has not yet been added. At least the hw_accel one could
      trigger another NULL pointer dereference.
      Signed-off-by: NJouni Malinen <j@w1.fi>
      Reviewed-by: NJohannes Berg <johannes@sipsolutions.net>
      Signed-off-by: NJohn W. Linville <linville@tuxdriver.com>
      32162a4d
  23. 27 7月, 2010 1 次提交