Revision 9dfef3adaebb42163d691be73e05b12da440cbe5 authored by Yuval Mintz on 05 January 2014, 16:33:53 UTC, committed by David S. Miller on 06 January 2014, 01:22:25 UTC
There are 2 different (related) flows in the slowpath configuration that utilize the same pointer and cast it to different structs; This is obviously incorrect as the intended allocated memory is that of the smaller struct, possibly causing the flow utilizing the larger struct to corrupt other slowpath configuration. Since both flows are exclusive, set the allocated memory to be a union of both structs. Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Yuval Mintz <yuvalmin@broadcom.com> Signed-off-by: Ariel Elior <ariele@broadcom.com> Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 5b62291
| File | Mode | Size |
|---|---|---|
| Kconfig | -rw-r--r-- | 8.9 KB |
| Makefile | -rw-r--r-- | 1.3 KB |
| aes_ccm.c | -rw-r--r-- | 2.4 KB |
| aes_ccm.h | -rw-r--r-- | 745 bytes |
| aes_cmac.c | -rw-r--r-- | 3.0 KB |
| aes_cmac.h | -rw-r--r-- | 574 bytes |
| agg-rx.c | -rw-r--r-- | 11.0 KB |
| agg-tx.c | -rw-r--r-- | 27.6 KB |
| cfg.c | -rw-r--r-- | 102.7 KB |
| cfg.h | -rw-r--r-- | 155 bytes |
| chan.c | -rw-r--r-- | 14.7 KB |
| debug.h | -rw-r--r-- | 4.7 KB |
| debugfs.c | -rw-r--r-- | 10.4 KB |
| debugfs.h | -rw-r--r-- | 375 bytes |
| debugfs_key.c | -rw-r--r-- | 9.5 KB |
| debugfs_key.h | -rw-r--r-- | 1.1 KB |
| debugfs_netdev.c | -rw-r--r-- | 20.8 KB |
| debugfs_netdev.h | -rw-r--r-- | 706 bytes |
| debugfs_sta.c | -rw-r--r-- | 14.5 KB |
| debugfs_sta.h | -rw-r--r-- | 427 bytes |
| driver-ops.h | -rw-r--r-- | 27.4 KB |
| event.c | -rw-r--r-- | 913 bytes |
| ht.c | -rw-r--r-- | 14.8 KB |
| ibss.c | -rw-r--r-- | 47.7 KB |
| ieee80211_i.h | -rw-r--r-- | 54.2 KB |
| iface.c | -rw-r--r-- | 46.6 KB |
| key.c | -rw-r--r-- | 23.6 KB |
| key.h | -rw-r--r-- | 3.8 KB |
| led.c | -rw-r--r-- | 7.8 KB |
| led.h | -rw-r--r-- | 2.1 KB |
| main.c | -rw-r--r-- | 31.1 KB |
| mesh.c | -rw-r--r-- | 37.5 KB |
| mesh.h | -rw-r--r-- | 13.3 KB |
| mesh_hwmp.c | -rw-r--r-- | 34.6 KB |
| mesh_pathtbl.c | -rw-r--r-- | 28.6 KB |
| mesh_plink.c | -rw-r--r-- | 28.4 KB |
| mesh_ps.c | -rw-r--r-- | 16.3 KB |
| mesh_sync.c | -rw-r--r-- | 6.6 KB |
| michael.c | -rw-r--r-- | 2.2 KB |
| michael.h | -rw-r--r-- | 573 bytes |
| mlme.c | -rw-r--r-- | 122.4 KB |
| offchannel.c | -rw-r--r-- | 12.7 KB |
| pm.c | -rw-r--r-- | 3.6 KB |
| rate.c | -rw-r--r-- | 19.1 KB |
| rate.h | -rw-r--r-- | 4.6 KB |
| rc80211_minstrel.c | -rw-r--r-- | 19.0 KB |
| rc80211_minstrel.h | -rw-r--r-- | 2.9 KB |
| rc80211_minstrel_debugfs.c | -rw-r--r-- | 4.8 KB |
| rc80211_minstrel_ht.c | -rw-r--r-- | 27.7 KB |
| rc80211_minstrel_ht.h | -rw-r--r-- | 2.8 KB |
| rc80211_minstrel_ht_debugfs.c | -rw-r--r-- | 3.8 KB |
| rc80211_pid.h | -rw-r--r-- | 7.7 KB |
| rc80211_pid_algo.c | -rw-r--r-- | 14.6 KB |
| rc80211_pid_debugfs.c | -rw-r--r-- | 5.9 KB |
| rx.c | -rw-r--r-- | 95.4 KB |
| scan.c | -rw-r--r-- | 28.4 KB |
| spectmgmt.c | -rw-r--r-- | 8.2 KB |
| sta_info.c | -rw-r--r-- | 40.3 KB |
| sta_info.h | -rw-r--r-- | 20.8 KB |
| status.c | -rw-r--r-- | 22.2 KB |
| tkip.c | -rw-r--r-- | 10.6 KB |
| tkip.h | -rw-r--r-- | 917 bytes |
| trace.c | -rw-r--r-- | 1.2 KB |
| trace.h | -rw-r--r-- | 40.4 KB |
| tx.c | -rw-r--r-- | 79.8 KB |
| util.c | -rw-r--r-- | 63.8 KB |
| vht.c | -rw-r--r-- | 11.9 KB |
| wep.c | -rw-r--r-- | 9.8 KB |
| wep.h | -rw-r--r-- | 1.1 KB |
| wme.c | -rw-r--r-- | 4.8 KB |
| wme.h | -rw-r--r-- | 748 bytes |
| wpa.c | -rw-r--r-- | 17.7 KB |
| wpa.h | -rw-r--r-- | 1.1 KB |
Computing file changes ...
