1. 18 Jul, 2011 1 commit
  2. 15 Jul, 2011 3 commits
  3. 13 Jul, 2011 2 commits
  4. 11 Jul, 2011 2 commits
  5. 08 Jul, 2011 8 commits
  6. 07 Jul, 2011 2 commits
    • Johannes Berg's avatar
      mac80211: fix TKIP replay vulnerability · 34459512
      Johannes Berg authored
      Unlike CCMP, the presence or absence of the QoS
      field doesn't change the encryption, only the
      TID is used. When no QoS field is present, zero
      is used as the TID value. This means that it is
      possible for an attacker to take a QoS packet
      with TID 0 and replay it as a non-QoS packet.
      
      Unfortunately, mac80211 uses different IVs for
      checking the validity of the packet's TKIP IV
      when it checks TID 0 and when it checks non-QoS
      packets. This means it is vulnerable to this
      replay attack.
      
      To fix this, use the same replay counter for
      TID 0 and non-QoS packets by overriding the
      rx->queue value to 0 if it is 16 (non-QoS).
      
      This is a minimal fix for now. I caused this
      issue in
      
      commit 1411f9b5
      Author: Johannes Berg <johannes@sipsolutions.net>
      Date:   Thu Jul 10 10:11:02 2008 +0200
      
          mac80211: fix RX sequence number check
      
      while fixing a sequence number issue (there,
      a separate counter needs to be used).
      
      Cc: stable@kernel.org
      Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
      Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
      34459512
    • Luciano Coelho's avatar
      mac80211: fix ie memory allocation for scheduled scans · 1186980d
      Luciano Coelho authored
      We were not allocating memory for the IEs passed in the scheduled_scan
      request and this was causing memory corruption (buffer overflow).
      Signed-off-by: default avatarLuciano Coelho <coelho@ti.com>
      Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
      1186980d
  7. 06 Jul, 2011 2 commits
  8. 05 Jul, 2011 3 commits
  9. 29 Jun, 2011 1 commit
  10. 27 Jun, 2011 6 commits
  11. 20 Jun, 2011 1 commit
    • Eliad Peller's avatar
      mac80211: quiesce vif before suspending · 77572fd1
      Eliad Peller authored
      Cancel all relevant timers/works before suspending (wowlan).
      
      This patch handles the following warning:
      WARNING: at net/mac80211/util.c:565 queueing ieee80211 work while going to suspend
      Backtrace:
      [<bf07b598>] (ieee80211_can_queue_work+0x0/0x4c [mac80211])
      [<bf07c28c>] (ieee80211_queue_work+0x0/0x30 [mac80211])
      [<bf0690dc>] (ieee80211_sta_timer+0x0/0x3c [mac80211])
      [<c00a3008>] (run_timer_softirq+0x0/0x220)
      [<c009e530>] (__do_softirq+0x0/0x130)
      [<c009e660>] (irq_exit+0x0/0xb4)
      [<c004c4a0>] (ipi_timer+0x0/0x4c)
      [<c0046350>] (do_local_timer+0x0/0x88)
      [<c00488ec>] (cpu_idle+0x0/0xe0)
      [<c05294e8>] (rest_init+0x0/0xe0)
      [<c0008958>] (start_kernel+0x0/0x314)
      Signed-off-by: default avatarEliad Peller <eliad@wizery.com>
      Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
      77572fd1
  12. 17 Jun, 2011 2 commits
  13. 10 Jun, 2011 2 commits
  14. 08 Jun, 2011 1 commit
  15. 07 Jun, 2011 2 commits
  16. 06 Jun, 2011 1 commit
  17. 03 Jun, 2011 1 commit