davidlt/kernel-ark
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
a26cbc6508
kernel-ark/drivers/net/wireless/rt2x00
History
Gertjan van Wingerde a26cbc6508 rt2x00: Fix double usage of skb->cb in USB RX path. 
It is not safe to use the skb->cb area for both the rxd and
skb_frame_desc data at the same time, while they occupy an overlapping
piece of memory. This can lead to hard to trace crashes as pointers
within skb_frame_desc are pointing into nowhere, or the rxd data is
overwritten with non-sense.

Fix it by copying the rxd to a small buffer on the stack.

Signed-off-by: Gertjan van Wingerde <gwingerde@kpnplanet.nl>
Signed-off-by: Ivo van Doorn <IvDoorn@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2008-06-14 12:17:57 -04:00
..
Kconfig rt2x00: Clarify supported chipsets in Kconfig 2008-05-07 15:02:27 -04:00
Makefile
rt2x00.h rt2x00: Centralize RX packet alignment handling in rt2x00lib. 2008-06-14 12:17:57 -04:00
rt2x00config.c rt2x00: Reset antenna RSSI after switch 2008-05-28 16:43:45 -04:00
rt2x00debug.c rt2x00: Cleanup struct skb_frame_desc. 2008-06-14 12:17:56 -04:00
rt2x00debug.h
rt2x00dev.c rt2x00: Centralize RX packet alignment handling in rt2x00lib. 2008-06-14 12:17:57 -04:00
rt2x00dump.h
rt2x00firmware.c
rt2x00leds.c rt2x00: Fix quality/activity led handling 2008-05-01 17:38:39 -04:00
rt2x00leds.h rt2x00: Remove MAC80211_LEDS dependency 2008-04-01 17:14:09 -04:00
rt2x00lib.h rt2x00: Move generic TX frame writing code into rt2x00queue 2008-06-14 12:17:56 -04:00
rt2x00mac.c rt2x00: Don't kick TX queue after each frame 2008-06-14 12:17:56 -04:00
rt2x00pci.c rt2x00: Centralize RX packet alignment handling in rt2x00lib. 2008-06-14 12:17:57 -04:00
rt2x00pci.h rt2x00: Move generic TX frame writing code into rt2x00queue 2008-06-14 12:17:56 -04:00
rt2x00queue.c rt2x00: Centralize RX packet alignment handling in rt2x00lib. 2008-06-14 12:17:57 -04:00
rt2x00queue.h rt2x00: Cleanup struct skb_frame_desc. 2008-06-14 12:17:56 -04:00
rt2x00reg.h rt2x00: Make rt2x00_set/get_field macros 2008-06-14 12:17:55 -04:00
rt2x00rfkill.c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6 2008-03-18 00:37:55 -07:00
rt2x00usb.c rt2x00: Fix double usage of skb->cb in USB RX path. 2008-06-14 12:17:57 -04:00
rt2x00usb.h rt2x00: Move generic TX frame writing code into rt2x00queue 2008-06-14 12:17:56 -04:00
rt61pci.c rt2x00: Cleanup struct skb_frame_desc. 2008-06-14 12:17:56 -04:00
rt61pci.h rt2x00: Fix queue related oops in case of deselected mac80211 multi-queue feature. 2008-05-21 21:47:32 -04:00
rt73usb.c rt2x00: Fix double usage of skb->cb in USB RX path. 2008-06-14 12:17:57 -04:00
rt73usb.h rt2x00: Fix queue related oops in case of deselected mac80211 multi-queue feature. 2008-05-21 21:47:32 -04:00
rt2400pci.c rt2x00: Cleanup struct skb_frame_desc. 2008-06-14 12:17:56 -04:00
rt2400pci.h rt2x00: Fix queue related oops in case of deselected mac80211 multi-queue feature. 2008-05-21 21:47:32 -04:00
rt2500pci.c rt2x00: Cleanup struct skb_frame_desc. 2008-06-14 12:17:56 -04:00
rt2500pci.h rt2x00: Fix queue related oops in case of deselected mac80211 multi-queue feature. 2008-05-21 21:47:32 -04:00
rt2500usb.c rt2x00: Fix double usage of skb->cb in USB RX path. 2008-06-14 12:17:57 -04:00
rt2500usb.h rt2x00: Fix queue related oops in case of deselected mac80211 multi-queue feature. 2008-05-21 21:47:32 -04:00