kernel-ark/net/wireless
Johannes Berg 9c5a18a31b cfg80211: wext: clear sinfo struct before calling driver
Until recently, mac80211 overwrote all the statistics it could
provide when getting called, but it now relies on the struct
having been zeroed by the caller. This was always the case in
nl80211, but wext used a static struct which could even cause
values from one device leak to another.

Using a static struct is OK (as even documented in a comment)
since the whole usage of this function and its return value is
always locked under RTNL. Not clearing the struct for calling
the driver has always been wrong though, since drivers were
free to only fill values they could report, so calling this
for one device and then for another would always have leaked
values from one to the other.

Fix this by initializing the structure in question before the
driver method call.

This fixes https://bugzilla.kernel.org/show_bug.cgi?id=99691

Cc: stable@vger.kernel.org
Reported-by: Gerrit Renker <gerrit@erg.abdn.ac.uk>
Reported-by: Alexander Kaltsas <alexkaltsas@gmail.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2015-06-09 13:54:58 -07:00
..
.gitignore
ap.c
chan.c
core.c cfg80211: calls nl80211_exit on error 2015-02-24 11:41:21 +01:00
core.h
db.txt
debugfs.c
debugfs.h
ethtool.c
genregdb.awk
ibss.c Lots of updates for net-next; along with the usual flurry 2015-03-31 16:39:04 -04:00
Kconfig cfg80211: don't allow disabling WEXT if it's required 2015-04-08 09:19:29 +02:00
lib80211_crypt_ccmp.c
lib80211_crypt_tkip.c
lib80211_crypt_wep.c
lib80211.c
Makefile
mesh.c
mlme.c cfg80211: add bss_type and privacy arguments in cfg80211_get_bss() 2015-03-03 15:56:01 +01:00
nl80211.c cfg80211: Stop calling crda if it is not responsive 2015-04-01 11:22:38 +02:00
nl80211.h
ocb.c
radiotap.c
rdev-ops.h cfg80211: pass name_assign_type to rdev_add_virtual_intf() 2015-03-30 10:36:17 +02:00
reg.c cfg80211: Stop calling crda if it is not responsive 2015-04-01 11:22:38 +02:00
reg.h cfg80211: Stop calling crda if it is not responsive 2015-04-01 11:22:38 +02:00
regdb.h
scan.c cfg80211: add bss_type and privacy arguments in cfg80211_get_bss() 2015-03-03 15:56:01 +01:00
sme.c cfg80211: send extended capabilities IE in connect 2015-04-07 13:56:45 +02:00
sysfs.c
sysfs.h
trace.c
trace.h Lots of updates for net-next; along with the usual flurry 2015-03-31 16:39:04 -04:00
util.c cfg80211: move IE split utilities here from mac80211 2015-04-07 13:56:41 +02:00
wext-compat.c cfg80211: wext: clear sinfo struct before calling driver 2015-06-09 13:54:58 -07:00
wext-compat.h cfg80211-wext: export symbols only when needed 2015-02-28 21:31:09 +01:00
wext-core.c
wext-priv.c
wext-proc.c
wext-sme.c wireless: Use eth_<foo>_addr instead of memset 2015-03-03 17:01:38 -05:00
wext-spy.c