Eliad Peller 292208914d iwlwifi: mvm: avoid use-after-free on iwl_mvm_d0i3_enable_tx() ...

qos_seq points (to a struct) inside the command response data.

Make sure to free the response only after qos_seq is not
needed anymore.

Reported-by: Heng Luo <heng.luo@intel.com>
Signed-off-by: Eliad Peller <eliadx.peller@intel.com>
Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>

2015-05-21 22:36:46 +03:00

..

binding.c

iwlwifi: Update Copyright to 2014

2013-12-31 19:03:53 +02:00

coex_legacy.c

iwlwifi: mvm: BT Coex - duplicate the command if sent ASYNC

2015-05-21 22:27:03 +03:00

coex.c

Merge tag 'mac80211-next-for-davem-2015-03-30' into iwlwifi-next

2015-04-02 09:26:51 +03:00

constants.h

iwlwifi: mvm: reduce quota threshold

2015-02-03 09:01:44 +02:00

d3.c

iwlwifi: mvm: clean net-detect info if device was reset during suspend

2015-05-21 22:28:51 +03:00

debugfs-vif.c

iwlwifi: mvm: fix compilation with IWLWIFI_DEBUGFS not set

2015-03-07 19:40:02 +02:00

debugfs.c

iwlwifi: mvm: add debugfs entry with the number of net-detect scans

2015-04-02 09:26:46 +03:00

debugfs.h

iwlwifi: add Intel Mobile Communications copyright

2014-09-03 22:49:07 +03:00

fw-api-coex.h

iwlwifi: mvm: BT Coex - update the new API

2015-03-12 09:57:45 +02:00

fw-api-d3.h

iwlwifi: fix spelling errors

2015-04-02 09:29:13 +03:00

fw-api-mac.h

iwlwifi: fix spelling errors

2015-04-02 09:29:13 +03:00

fw-api-power.h

iwlwifi: mvm: fix Tx Power firmware API

2015-04-19 17:06:20 +03:00

fw-api-rs.h

iwlwifi: mvm: rs: enable forcing single stream Tx decision

2015-02-01 15:39:29 +02:00

fw-api-scan.h

iwlwifi: mvm: fix scan iteration complete notification handling

2015-04-19 17:06:57 +03:00

fw-api-sta.h

iwlwifi: add Intel Mobile Communications copyright

2014-09-03 22:49:07 +03:00

fw-api-stats.h

iwlwifi: mvm: support radio statistics as global survey

2015-03-01 16:55:09 +02:00

fw-api-tx.h

iwlwifi: mvm: let the firmware configure the scheduler

2015-01-22 17:54:02 +02:00

fw-api.h

iwlwifi: mvm: fix Tx Power firmware API

2015-04-19 17:06:20 +03:00

fw.c

iwlwifi: mvm: don't power off the device between INIT and OPER firmwares

2015-04-28 14:58:51 +03:00

led.c

iwlwifi: mvm: don't fail completely if led mode is not supported

2014-03-16 08:59:05 +02:00

mac80211.c

iwlwifi: mvm: fix MLME trigger

2015-05-15 10:34:25 +03:00

mac-ctxt.c

iwlwifi: mvm: do string formatting in debug triggers

2015-04-02 09:29:13 +03:00

Makefile

iwlwifi: mvm: move TDLS code to separate file

2014-09-14 22:02:24 +03:00

mvm.h

iwlwifi: mvm: don't power off the device between INIT and OPER firmwares

2015-04-28 14:58:51 +03:00

nvm.c

iwlwifi: mvm: always reconfigure last MCC on init

2015-04-02 09:26:46 +03:00

offloading.c

iwlwifi: mvm: remove IWL_UCODE_TLV_API_WOWLAN_CONFIG_TID

2014-12-01 12:04:38 +02:00

ops.c

iwlwifi: mvm: avoid use-after-free on iwl_mvm_d0i3_enable_tx()

2015-05-21 22:36:46 +03:00

phy-ctxt.c

iwlwifi: fix spelling errors

2015-04-02 09:29:13 +03:00

power.c

Merge tag 'iwlwifi-next-for-kalle-2015-03-12' of https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

2015-03-13 15:09:18 +02:00

quota.c

iwlwifi: mvm: always update the quota after association

2015-03-12 09:57:34 +02:00

rs.c

iwlwifi: mvm: forbid MIMO on devices that don't support it

2015-05-10 11:44:42 +03:00

rs.h

iwlwifi: mvm: rs: avoid ss_force from being reset after tx idle

2015-03-01 16:55:05 +02:00

rx.c

iwlwifi: mvm: Avoid signal based decisions if ave beacon RSSI is 0

2015-04-19 17:06:57 +03:00

scan.c

iwlwifi: mvm: fix scan iteration complete notification handling

2015-04-19 17:06:57 +03:00

sf.c

iwlwifi: mvm: Always enable the smart FIFO

2015-03-12 09:57:47 +02:00

sta.c

iwlwifi: fix spelling errors

2015-04-02 09:29:13 +03:00

sta.h

iwlwifi: fix spelling errors

2015-04-02 09:29:13 +03:00

tdls.c

iwlwifi: mvm: ignore stale TDLS ch-switch responses

2015-02-01 15:57:22 +02:00

testmode.h

iwlwifi: add Intel Mobile Communications copyright

2014-09-03 22:49:07 +03:00

time-event.c

iwlwifi: mvm: capture connection loss as part of MLME trigger

2015-04-02 09:29:13 +03:00

time-event.h

iwlwifi: fix spelling errors

2015-04-02 09:29:13 +03:00

tt.c

iwlwifi: mvm: clear tt values when entering CT-kill

2014-12-28 20:00:15 +02:00

tx.c

Merge tag 'iwlwifi-next-for-kalle-2015-04-02' of https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

2015-04-07 19:55:57 +03:00

utils.c

iwlwifi: mvm: capture connection loss as part of MLME trigger

2015-04-02 09:29:13 +03:00