[PATCH 1/1] mt7601u: check return value of alloc_skb

2017-04-23 Thread Pan Bian
Function alloc_skb() will return a NULL pointer if there is no enough memory. However, in function mt7601u_mcu_msg_alloc(), its return value is not validated before it is used. This patch fixes it. Signed-off-by: Pan Bian --- drivers/net/wireless/mediatek/mt7601u/mcu.c | 10 -- 1 file ch

[PATCH 1/1] staging: wilc1000: fix unchecked return value

2017-04-23 Thread Pan Bian
From: Pan Bian Function dev_alloc_skb() will return a NULL pointer if there is no enough memory. However, in function WILC_WFI_mon_xmit(), its return value is used without validation. This may result in a bad memory access bug. This patch fixes the bug. Signed-off-by: Pan Bian --- drivers/stag

[PATCH 1/1] libertas: check return value of alloc_workqueue

2017-04-23 Thread Pan Bian
From: Pan Bian Function alloc_workqueue() will return a NULL pointer if there is no enough memory, and its return value should be validated before using. However, in function if_spi_probe(), its return value is not checked. This may result in a NULL dereference bug. This patch fixes the bug. Sig

[PATCH 1/1] cfg80211: add return value validation

2017-04-23 Thread Pan Bian
From: Pan Bian Function create_singlethread_workqueue() will return a NULL pointer if there is no enough memory, and its return value should be validated before using. However, in function rndis_wlan_bind(), its return value is not checked. This may cause NULL dereference bugs. This patch fixes i

Re: [PATCH 1/1] cfg80211: add return value validation

2017-04-23 Thread Johannes Berg
This is not a cfg80211 patch, please resend with the correct subject. Thanks, johannes

Re: [PATCH] brcm80211: brcmfmac: Ensure that incoming skb's are writable

2017-04-23 Thread Arend Van Spriel
On 21-4-2017 11:22, James Hughes wrote: > On 20 April 2017 at 20:48, Arend van Spriel > wrote: >> + linux-wireless >> >> On 4/20/2017 1:16 PM, James Hughes wrote: >>> >>> The driver was adding header information to incoming skb >>> without ensuring the head was uncloned and hence writable. >>> >>>

[PATCH 1/1] rndis_wlan: add return value validation

2017-04-23 Thread Pan Bian
From: Pan Bian Function create_singlethread_workqueue() will return a NULL pointer if there is no enough memory, and its return value should be validated before using. However, in function rndis_wlan_bind(), its return value is not checked. This may cause NULL dereference bugs. This patch fixes i

4.11-rc* iwlwifi instable

2017-04-23 Thread Andi Kleen
Hi, Since I updated my laptop to 4.11-rc* the wireless is fairly instable (I think it was already less stable with 4.10 than with 4.8, but no clear data) For example it locked up (no more wireless) with a warn on while connecting and actually needed a reboot to recover (reloading modules was no

Re: [PATCH 1/1] mt7601u: check return value of alloc_skb

2017-04-23 Thread Jakub Kicinski
On Sun, 23 Apr 2017 15:00:23 +0800, Pan Bian wrote: > Function alloc_skb() will return a NULL pointer if there is no enough > memory. However, in function mt7601u_mcu_msg_alloc(), its return value > is not validated before it is used. This patch fixes it. > > Signed-off-by: Pan Bian Acked-by: Ja

Receive Buffer Detection [ath9k] [mac80211]

2017-04-23 Thread prabhu
How to get the rx buffer size of the station associated to an AP in mac80211 ? Thanks, Prabhu

[PATCH] ath10k: fix out of bounds access to local buffer

2017-04-23 Thread Michael Mera
During write to debugfs file simulate_fw_crash, fixed-size local buffer 'buf' is accessed and modified at index 'count-1', where 'count' is the size of the write (so potentially out of bounds). This patch fixes this problem. Signed-off-by: Michael Mera --- drivers/net/wireless/ath/ath10k/debug.c

Re: 4.11-rc* iwlwifi instable

2017-04-23 Thread Luca Coelho
On Sun, 2017-04-23 at 17:54 -0700, Andi Kleen wrote: > Hi, Hi Andi, > Since I updated my laptop to 4.11-rc* the wireless is fairly instable > (I think it was already less stable with 4.10 than with 4.8, but no > clear data) > > For example it locked up (no more wireless) with a warn on while c

Re: [PATCH] ath10k: fix out of bounds access to local buffer

2017-04-23 Thread Marcin Rokicki
Hi, Please send again to ath...@lists.infradead.org with cc linux-wireless@vger.kernel.org Thanks. 2017-04-24 7:39 GMT+02:00 Michael Mera : > During write to debugfs file simulate_fw_crash, fixed-size local buffer > 'buf' is accessed and modified at index 'count-1', where 'count' is the > size o