Johannes Berg 338f977f4e mac80211: fix fragmentation code, particularly for encryption ... The "new" fragmentation code (since my rewrite almost 5 years ago) erroneously sets skb->len rather than using skb_trim() to adjust the length of the first fragment after copying out all the others. This leaves the skb tail pointer pointing to after where the data originally ended, and thus causes the encryption MIC to be written at that point, rather than where it belongs: immediately after the data. The impact of this is that if software encryption is done, then a) encryption doesn't work for the first fragment, the connection becomes unusable as the first fragment will never be properly verified at the receiver, the MIC is practically guaranteed to be wrong b) we leak up to 8 bytes of plaintext (!) of the packet out into the air This is only mitigated by the fact that many devices are capable of doing encryption in hardware, in which case this can't happen as the tail pointer is irrelevant in that case. Additionally, fragmentation is not used very frequently and would normally have to be configured manually. Fix this by using skb_trim() properly. Cc: stable@vger.kernel.org Fixes: 2de8e0d999 ("mac80211: rewrite fragmentation") Reported-by: Jouni Malinen <j@w1.fi> Signed-off-by: Johannes Berg <johannes.berg@intel.com>		2014-02-06 09:55:21 +01:00
..
aes_ccm.c	mac80211: port CCMP to cryptoapi's CCM driver	2013-10-11 15:38:20 +02:00
aes_ccm.h	mac80211: port CCMP to cryptoapi's CCM driver	2013-10-11 15:38:20 +02:00
aes_cmac.c	mac80211: fix checkpatch errors	2013-12-18 10:33:06 +01:00
aes_cmac.h	mac80211: fix checkpatch errors	2013-12-18 10:33:06 +01:00
agg-rx.c	mac80211: improve aggregation debug messages	2013-01-18 21:55:15 +01:00
agg-tx.c	mac80211: fix aggregation state with current drivers	2013-01-24 15:43:51 +01:00
cfg.c	mac80211: release the channel in error path in start_ap	2014-02-06 09:55:20 +01:00
cfg.h
chan.c	mac80211: fix iflist_mtx/mtx locking in radar detection	2013-12-19 13:33:33 +01:00
debug.h	mac80211: process the CSA frame for mesh accordingly	2013-10-28 15:05:28 +01:00
debugfs_key.c	mac80211: move sdata debugfs dir to vif	2013-03-18 20:10:04 +01:00
debugfs_key.h	mac80211: support separate default keys	2010-12-13 15:23:29 -05:00
debugfs_netdev.c	mac80211: sync dtim_count to TSF	2014-01-06 20:10:47 +01:00
debugfs_netdev.h	mac80211: reduce reliance on netdev	2009-12-21 18:38:52 -05:00
debugfs_sta.c	mac80211: Tx frame latency statistics	2013-12-02 11:51:50 +01:00
debugfs_sta.h
debugfs.c	mac80211: Tx frame latency statistics	2013-12-02 11:51:50 +01:00
debugfs.h	mac80211: use __printf attribute in debugfs	2012-10-18 09:01:57 +02:00
driver-ops.h	mac80211: add pre-RCU-sync sta removal driver operation	2013-12-16 11:29:44 +01:00
event.c	cfg80211: use proper allocation flags	2009-07-10 15:01:49 -04:00
ht.c	mac80211: avoid deadlock revealed by lockdep	2014-02-06 09:55:18 +01:00
ibss.c	mac80211: Fix IBSS disconnect	2014-02-06 09:55:20 +01:00
ieee80211_i.h	mac80211: sync dtim_count to TSF	2014-01-06 20:10:47 +01:00
iface.c	mac80211: avoid deadlock revealed by lockdep	2014-02-06 09:55:18 +01:00
Kconfig	mac80211: process the CSA frame for mesh accordingly	2013-10-28 15:05:28 +01:00
key.c	mac80211: free all AP/VLAN keys at once	2013-12-16 11:29:48 +01:00
key.h	mac80211: free all AP/VLAN keys at once	2013-12-16 11:29:48 +01:00
led.c	mac80211: use oneshot blink API for LED triggers	2013-08-01 10:48:49 +02:00
led.h	mac80211: use oneshot blink API for LED triggers	2013-08-01 10:48:49 +02:00
main.c	mac80211: fix memory leak in register_hw() error path	2014-01-06 16:02:34 +01:00
Makefile	mac80211: mesh power save basics	2013-02-04 18:57:47 +01:00
mesh_hwmp.c	mac80211: use put_unaligned_le in mesh when necessary	2013-11-25 20:51:55 +01:00
mesh_pathtbl.c	mac80211: use put_unaligned_le in mesh when necessary	2013-11-25 20:51:55 +01:00
mesh_plink.c	mac80211: enable WME for peer mesh STA	2014-01-06 17:43:06 +01:00
mesh_ps.c	mac80211: use put_unaligned_le16 in mesh_plink_frame_tx	2013-11-25 20:51:53 +01:00
mesh_sync.c	mac80211: update adjusting TBTT bit in beacon	2013-12-16 14:21:22 +01:00
mesh.c	mac80211: sync dtim_count to TSF	2014-01-06 20:10:47 +01:00
mesh.h	mac80211: use put_unaligned_le in mesh when necessary	2013-11-25 20:51:55 +01:00
michael.c	mac80211: remove ieee80211_get_hdr_info	2008-07-08 14:16:01 -04:00
michael.h	mac80211: remove ieee80211_get_hdr_info	2008-07-08 14:16:01 -04:00
mlme.c	mac80211: fix iflist_mtx/mtx locking in radar detection	2013-12-19 13:33:33 +01:00
offchannel.c	mac80211: Run deferred scan if last roc_list item is not started	2013-09-30 12:36:56 +02:00
pm.c	mac80211: don't delay station destruction	2013-12-16 11:29:45 +01:00
rate.c	mac80211: respect rate mask in TX	2013-10-15 15:16:29 +02:00
rate.h	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next	2013-12-02 14:25:38 -05:00
rc80211_minstrel_debugfs.c	mac80211: cosmetics for minstrel_debugfs	2013-04-17 17:08:23 +02:00
rc80211_minstrel_ht_debugfs.c	mac80211: minstrel_ht: replace some occurences of MCS_GROUP_RATES	2013-11-25 20:52:07 +01:00
rc80211_minstrel_ht.c	mac80211: fix checkpatch errors	2013-12-18 10:33:06 +01:00
rc80211_minstrel_ht.h	mac80211/minstrel_ht: use the new rate control API	2013-04-22 16:16:41 +02:00
rc80211_minstrel.c	mac80211: fix checkpatch errors	2013-12-18 10:33:06 +01:00
rc80211_minstrel.h	mac80211/minstrel: use the new rate control API	2013-04-22 16:16:41 +02:00
rc80211_pid_algo.c	mac80211/rc80211: add chandef to rate initialization	2013-07-16 09:58:02 +03:00
rc80211_pid_debugfs.c	mac80211: fix some snprintf misuses	2013-10-01 12:16:51 +02:00
rc80211_pid.h	Fix common misspellings	2011-03-31 11:26:23 -03:00
rx.c	mac80211: clean up prepare_for_handlers() return value	2014-01-07 16:23:24 +01:00
scan.c	mac80211: reschedule sched scan after HW restart	2013-12-16 13:47:26 +01:00
spectmgmt.c	mac80211: fix the mesh channel switch support	2013-11-25 16:50:13 +01:00
sta_info.c	mac80211: handle MMPDUs at EOSP correctly	2014-01-10 09:50:02 +01:00
sta_info.h	mac80211: optimise mixed AP/VLAN station removal	2013-12-16 11:29:47 +01:00
status.c	mac80211: Tx frame latency statistics	2013-12-02 11:51:50 +01:00
tkip.c	mac80211: fix checkpatch errors	2013-12-18 10:33:06 +01:00
tkip.h	mac80211: fix TKIP races, make API easier to use	2011-07-08 11:11:19 -04:00
trace.c	mac80211: trace debug messages	2012-06-24 11:33:18 +02:00
trace.h	mac80211: add tracing for ieee80211_sta_set_buffered	2014-01-06 12:09:01 +01:00
tx.c	mac80211: fix fragmentation code, particularly for encryption	2014-02-06 09:55:21 +01:00
util.c	mac80211: sync dtim_count to TSF	2014-01-06 20:10:47 +01:00
vht.c	mac80211: enable easier manipulation of VHT beamforming caps	2013-11-25 20:52:01 +01:00
wep.c	wireless: move crypto constants to ieee80211.h	2013-05-16 22:39:41 +02:00
wep.h	mac80211: move RX WEP weak IV counting	2012-03-13 14:54:16 -04:00
wme.c	mac80211: Add support for QoS mapping	2013-12-19 16:30:58 +01:00
wme.h	mac80211: save wmm_acm per sdata	2012-06-20 17:35:22 +02:00
wpa.c	mac80211: clean up garbage in comment	2014-01-07 16:21:56 +01:00
wpa.h	mac80211: add generic cipher scheme support	2013-11-25 20:50:52 +01:00