Vladis Dronov e785fa0a16 nl80211: check for the required netlink attributes presence ... nl80211_set_rekey_data() does not check if the required attributes NL80211_REKEY_DATA_{REPLAY_CTR,KEK,KCK} are present when processing NL80211_CMD_SET_REKEY_OFFLOAD request. This request can be issued by users with CAP_NET_ADMIN privilege and may result in NULL dereference and a system crash. Add a check for the required attributes presence. This patch is based on the patch by bo Zhang. This fixes CVE-2017-12153. References: https://bugzilla.redhat.com/show_bug.cgi?id=1491046 Fixes: e5497d766a ("cfg80211/nl80211: support GTK rekey offload") Cc: <stable@vger.kernel.org> # v3.1-rc1 Reported-by: bo Zhang <zhangbo5891001@gmail.com> Signed-off-by: Vladis Dronov <vdronov@redhat.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com>		2017-09-15 09:15:14 +02:00
..
.gitignore
ap.c	cfg80211: Make pre-CAC results valid only for ETSI domain	2017-03-06 13:54:15 +01:00
chan.c	cfg80211: Share Channel DFS state across wiphys of same DFS domain	2017-03-06 13:54:20 +01:00
core.c	cfg80211: support 4-way handshake offloading for 802.1X	2017-06-13 10:44:09 +02:00
core.h	cfg80211: add request id to cfg80211_sched_scan_*() api	2017-04-28 14:51:43 +02:00
db.txt
debugfs.c
debugfs.h
ethtool.c
genregdb.awk
ibss.c	cfg80211: Make pre-CAC results valid only for ETSI domain	2017-03-06 13:54:15 +01:00
Kconfig
lib80211_crypt_ccmp.c
lib80211_crypt_tkip.c
lib80211_crypt_wep.c
lib80211.c
Makefile
mesh.c	wireless: Only join DFS channels in mesh mode if userspace flags support	2017-05-19 13:25:58 +02:00
mlme.c	cfg80211: Use a structure to pass connect response params	2017-03-31 08:31:26 +02:00
nl80211.c	nl80211: check for the required netlink attributes presence	2017-09-15 09:15:14 +02:00
nl80211.h	cfg80211: unify cfg80211_roamed() and cfg80211_roamed_bss()	2017-04-28 12:28:44 +02:00
ocb.c
of.c
radiotap.c
rdev-ops.h	cfg80211: support 4-way handshake offloading for 802.1X	2017-06-13 10:44:09 +02:00
reg.c	cfg80211: honor NL80211_RRF_NO_HT40{MINUS,PLUS}	2017-09-06 12:56:31 +02:00
reg.h	cfg80211: Share Channel DFS state across wiphys of same DFS domain	2017-03-06 13:54:20 +01:00
regdb.h
scan.c	cfg80211: make cfg80211_sched_scan_results() work from atomic context	2017-05-23 14:36:46 +02:00
sme.c	nl80211: add authorized flag to ROAM event	2017-06-13 11:04:37 +02:00
sysfs.c	cfg80211: check rdev resume callback only for registered wiphy	2017-03-29 09:11:29 +02:00
sysfs.h
trace.c
trace.h	cfg80211: support 4-way handshake offloading for 802.1X	2017-06-13 10:44:09 +02:00
util.c	networking: make skb_push & __skb_push return void pointers	2017-06-16 11:48:40 -04:00
wext-compat.c	cfg80211: move add/change interface monitor flags into params	2017-04-13 13:41:38 +02:00
wext-compat.h
wext-core.c	dev_ioctl: copy only the smaller struct iwreq for wext	2017-06-14 13:52:44 +02:00
wext-priv.c
wext-proc.c
wext-sme.c
wext-spy.c