Patch "mac80211_hwsim: Add missing check for HWSIM_ATTR_SIGNAL" has been added to the 3.14-stable tree
Subsystems (2)
This is a note to let you know that I've just added the patch titled
mac80211_hwsim: Add missing check for HWSIM_ATTR_SIGNAL
to the 3.14-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
mac80211_hwsim-add-missing-check-for-hwsim_attr_signal.patch
and it can be found in the queue-3.14 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From
62397da50bb20a6b812c949ef465d7e69fe54bb6Mon Sep 17 00:00:00 2001
From: Martin Willi <[email protected]>
Date: Fri, 13 May 2016 12:41:48 +0200
Subject: mac80211_hwsim: Add missing check for HWSIM_ATTR_SIGNAL
From: Martin Willi <[email protected]>
commit 62397da50bb20a6b812c949ef465d7e69fe54bb6 upstream.
A wmediumd that does not send this attribute causes a NULL pointer dereference, as the attribute is accessed even if it does not exist.
The attribute was required but never checked ever since userspace frame forwarding has been introduced. The issue gets more problematic once we allow wmediumd registration from user namespaces.
--- drivers/net/wireless/mac80211_hwsim.c | 1 + 1 file changed, 1 insertion(+)
drivers/net/wireless/mac80211_hwsim.c +1 -0
@@ -2251,6 +2251,7 @@ static int hwsim_tx_info_frame_received_if (!info->attrs[HWSIM_ATTR_ADDR_TRANSMITTER ] || !info->attrs[HWSIM_ATTR_FLAGS ] || !info->attrs[HWSIM_ATTR_COOKIE ] || + !info->attrs[HWSIM_ATTR_SIGNAL ] || !info->attrs[HWSIM_ATTR_TX_INFO ]) goto out;
Patches currently in stable-queue which might be from [email protected] are
queue-3.14/mac80211_hwsim-add-missing-check-for-hwsim_attr_signal.patch