Arend Van Spriel d77facb884 brcmfmac: use local iftype avoiding use-after-free of virtual interface ... A use-after-free was found using KASAN. In brcmf_p2p_del_if() the virtual interface is removed using call to brcmf_remove_interface(). After that the virtual interface instance has been freed and should not be referenced. Solve this by storing the nl80211 iftype in local variable, which is used in a couple of places anyway. Cc: stable@vger.kernel.org # 4.10.x, 4.9.x Reported-by: Daniel J Blueman <daniel@quora.org> Reviewed-by: Hante Meuleman <hante.meuleman@broadcom.com> Reviewed-by: Pieter-Paul Giesberts <pieter-paul.giesberts@broadcom.com> Reviewed-by: Franky Lin <franky.lin@broadcom.com> Signed-off-by: Arend van Spriel <arend.vanspriel@broadcom.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org>		2017-03-30 19:43:51 +03:00
..
appletalk
arcnet	lib/vsprintf.c: remove %Z support	2017-02-27 18:43:47 -08:00
bonding	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-03-04 17:31:39 -08:00
caif	virtio: allow drivers to request IRQ affinity when creating VQs	2017-02-27 20:54:04 +02:00
can	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-03-04 17:31:39 -08:00
cris
dsa	net:dsa:mv88e6xxx: use watchdog ops for 6097 chip	2017-02-14 11:45:28 -05:00
ethernet	amd-xgbe: Fix jumbo MTU processing on newer hardware	2017-03-15 15:36:59 -07:00
fddi
fjes	fjes: Fix wrong netdevice feature flags	2017-03-15 12:43:23 -07:00
hamradio	driver core patches for 4.11-rc1	2017-02-22 11:44:32 -08:00
hippi
hyperv	netvsc: handle select_queue when device is being removed	2017-03-12 23:13:41 -07:00
ieee802154	ieee802154: atusb: fix driver to work with older firmware versions	2017-01-12 22:12:43 +01:00
ipvlan	ipvtap: IP-VLAN based tap driver	2017-02-11 20:59:41 -05:00
irda	sched/headers: Prepare to move signal wakeup & sigpending methods from <linux/sched.h> into <linux/sched/signal.h>	2017-03-02 08:42:32 +01:00
phy	net: phy: marvell: Fix double free of hwmon device	2017-03-09 22:41:03 -08:00
plip
ppp	sched/headers: Prepare to move signal wakeup & sigpending methods from <linux/sched.h> into <linux/sched/signal.h>	2017-03-02 08:42:32 +01:00
slip	sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h>	2017-03-02 08:42:29 +01:00
team	team: use ETH_MAX_MTU as max mtu	2017-03-08 22:19:17 -08:00
usb	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-03-04 17:31:39 -08:00
vmxnet3	drivers: net: generalize napi_complete_done()	2017-01-30 15:10:42 -05:00
wan	ucc/hdlc: fix two little issue	2017-03-13 21:53:48 -07:00
wimax	net: wimax/i2400m: fix NULL-deref at probe	2017-03-13 12:28:40 -07:00
wireless	brcmfmac: use local iftype avoiding use-after-free of virtual interface	2017-03-30 19:43:51 +03:00
xen-netback	xen-netback: fix race condition on XenBus disconnect	2017-03-12 23:44:43 -07:00
dummy.c	net: dummy: Introduce dummy virtual functions	2017-01-24 14:07:22 -05:00
eql.c
geneve.c	geneve: lock RCU on TX path	2017-03-01 09:58:31 -08:00
gtp.c	lib/vsprintf.c: remove %Z support	2017-02-27 18:43:47 -08:00
ifb.c
Kconfig	vmxnet3: prevent building with 64K pages	2017-02-17 15:25:49 -05:00
LICENSE.SRC
loopback.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-02-11 02:31:11 -05:00
macsec.c	macsec: fix validation failed in asynchronous operation.	2017-02-21 13:13:51 -05:00
macvlan.c	tap: Abstract type of virtual interface from tap implementation	2017-02-11 20:59:41 -05:00
macvtap.c	sched/headers: Prepare to move signal wakeup & sigpending methods from <linux/sched.h> into <linux/sched/signal.h>	2017-03-02 08:42:32 +01:00
Makefile	ipvtap: IP-VLAN based tap driver	2017-02-11 20:59:41 -05:00
mdio.c
mii.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c	sched/headers: Move task_struct::signal and task_struct::sighand types and accessors into <linux/sched/signal.h>	2017-03-03 01:43:37 +01:00
tun.c	tun: fix premature POLLOUT notification on tun devices	2017-03-13 22:00:17 -07:00
veth.c
virtio_net.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2017-03-04 17:31:39 -08:00
vrf.c	vrf: Fix use-after-free in vrf_xmit	2017-03-08 23:10:02 -08:00
vxlan.c	vxlan: fix ovs support	2017-03-13 16:03:42 -07:00
xen-netfront.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2017-02-22 10:15:09 -08:00