Stanislav Yakovlev bf11315eed net/wireless: ipw2200: Fix panic occurring in ipw_handle_promiscuous_tx() ...

The driver does not count space of radiotap fields when allocating skb for
radiotap packet. This leads to kernel panic with the following call trace:

...
[67607.676067] [<c152f90f>] error_code+0x67/0x6c
[67607.676067] [<c142f831>] ? skb_put+0x91/0xa0
[67607.676067] [<f8cf5e5b>] ? ipw_handle_promiscuous_tx+0x16b/0x2d0 [ipw2200]
[67607.676067] [<f8cf5e5b>] ipw_handle_promiscuous_tx+0x16b/0x2d0 [ipw2200]
[67607.676067] [<f8cf899b>] ipw_net_hard_start_xmit+0x8b/0x90 [ipw2200]
[67607.676067] [<f8741c5a>] libipw_xmit+0x55a/0x980 [libipw]
[67607.676067] [<c143d3e8>] dev_hard_start_xmit+0x218/0x4d0
...

This bug was found by VittGam.
https://bugzilla.kernel.org/show_bug.cgi?id=43255

Cc: stable@kernel.org
Signed-off-by: Stanislav Yakovlev <stas.yakovlev@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

2012-10-15 14:45:52 -04:00

..

appletalk

net: Use PTR_RET rather than if(IS_ERR(.. [1]

2012-08-06 13:30:02 -07:00

arcnet

arcnet: rimi: Fix device name in debug output

2012-04-17 22:22:43 -04:00

bonding

bonding: set qdisc_tx_busylock to avoid LOCKDEP splat

2012-10-04 15:53:48 -04:00

caif

caif: fix NULL pointer check

2012-07-24 13:54:16 -07:00

can

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2012-10-06 03:11:59 +09:00

cris

cris: fix eth_v10.c build error

2012-08-03 20:32:31 -07:00

dsa

drivers/net: dsa/mv88e6xxx.c files need linux/module.h

2012-01-24 15:44:50 -05:00

ethernet

net/ethernet/jme: disable ASPM

2012-10-11 15:18:49 -04:00

fddi

fddi: 64 bit bug in smt_add_para()

2012-09-01 22:44:13 -04:00

hamradio

sections: fix section conflicts in drivers/net/hamradio

2012-10-06 03:04:43 +09:00

hippi

hippi: fix printk format in rrunner.c

2012-04-16 23:48:38 -04:00

hyperv

hyperv: Add buffer for extended info after the RNDIS response message.

2012-10-02 14:39:31 -04:00

ieee802154

workqueue: avoid using deprecated functions

2012-10-02 16:01:31 -07:00

irda

drivers/net/irda/sh_sir.c: fix error return code

2012-10-07 14:37:11 -04:00

phy

netdev/phy: Prototype of_mdio_find_bus()

2012-10-09 13:54:59 -04:00

plip

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

ppp

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2012-09-28 14:40:49 -04:00

slip

drivers: net: Remove casts to same type

2012-06-06 09:31:33 -07:00

team

team: set qdisc_tx_busylock to avoid LOCKDEP splat

2012-10-04 15:53:48 -04:00

usb

mcs7830: Fix link state detection

2012-10-12 13:56:52 -04:00

vmxnet3

vmxnet3: Fix race between dev_open() and register_netdev()

2012-08-15 15:10:42 -07:00

wan

farsync: fix support for over 30 cards

2012-10-09 13:54:59 -04:00

wimax

wimax/i2400m: use is_zero_ether_addr() instead of memcmp()

2012-08-24 13:30:26 -04:00

wireless

net/wireless: ipw2200: Fix panic occurring in ipw_handle_promiscuous_tx()

2012-10-15 14:45:52 -04:00

xen-netback

xen: netback: handle compound page fragments on transmit.

2012-10-10 22:50:45 -04:00

dummy.c

net: fix race condition in several drivers when reading stats

2012-07-22 12:12:32 -07:00

eql.c

eql: dont rely on HZ=100

2012-03-27 22:45:26 -04:00

ifb.c

net: replace random_ether_addr() with eth_hw_addr_random()

2012-02-15 15:34:16 -05:00

Kconfig

vxlan: Depend on CONFIG_INET

2012-10-02 14:37:31 -04:00

LICENSE.SRC

…

loopback.c

net: loopback: set default mtu to 64K

2012-09-24 16:23:53 -04:00

macvlan.c

netlink: add attributes to fdb interface

2012-10-01 18:39:44 -04:00

macvtap.c

macvtap: rcu_dereference outside read-lock section

2012-08-12 13:40:48 -07:00

Makefile

vxlan: virtual extensible lan

2012-10-01 18:39:45 -04:00

mdio.c

ethtool, mdio, mii: Specify MDIO information fields in struct ethtool_cmd

2012-03-01 16:41:26 -05:00

mii.c

ethtool, mdio, mii: Specify MDIO information fields in struct ethtool_cmd

2012-03-01 16:41:26 -05:00

netconsole.c

netconsole: remove a redundant netconsole_target_put()

2012-08-20 02:59:49 -07:00

rionet.c

rapidio/rionet: rework to support multiple RIO master ports

2012-10-06 03:05:23 +09:00

sb1000.c

…

Space.c

drivers/net: delete all code/drivers depending on CONFIG_MCA

2012-05-17 16:37:41 -04:00

sungem_phy.c

…

tun.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace

2012-10-02 11:11:09 -07:00

veth.c

veth: Allow to create peer link with given ifindex

2012-08-09 16:18:07 -07:00

virtio_net.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2012-10-02 13:38:27 -07:00

vxlan.c

vxlan: fix oops when give unknown ifindex

2012-10-10 22:41:22 -04:00

xen-netfront.c

Merge tag 'stable/for-linus-3.7-arm-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen

2012-10-07 07:13:01 +09:00