tmakin/ack-tegra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
testing-6.12
ack-tegra/drivers/net/wireless/ath/ath9k
T
History
Toke Høiland-Jørgensen ee5ee64638 wifi: ath9k_htc: Abort software beacon handling if disabled 
[ Upstream commit ac4e317a95a1092b5da5b9918b7118759342641c ]

A malicious USB device can send a WMI_SWBA_EVENTID event from an
ath9k_htc-managed device before beaconing has been enabled. This causes
a device-by-zero error in the driver, leading to either a crash or an
out of bounds read.

Prevent this by aborting the handling in ath9k_htc_swba() if beacons are
not enabled.

Reported-by: Robert Morris <rtm@csail.mit.edu>
Closes: https://lore.kernel.org/r/88967.1743099372@localhost
Fixes: 832f6a18fc ("ath9k_htc: Add beacon slots")
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
Link: https://patch.msgid.link/20250402112217.58533-1-toke@toke.dk
Signed-off-by: Jeff Johnson <jeff.johnson@oss.qualcomm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-06-19 15:31:50 +02:00
..
ahb.c
Revert "wifi: ath9k: use devm for request_irq()"
2024-08-10 10:21:58 +03:00
ani.c
…
ani.h
…
antenna.c
wifi: ath9k: fix LNA selection in ath_ant_try_scan()
2023-12-18 20:46:30 +02:00
ar953x_initvals.h
…
ar955x_1p0_initvals.h
…
ar956x_initvals.h
…
ar5008_initvals.h
…
ar5008_phy.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9001_initvals.h
…
ar9002_calib.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9002_hw.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9002_initvals.h
…
ar9002_mac.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9002_phy.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9002_phy.h
…
ar9003_2p2_initvals.h
…
ar9003_aic.c
…
ar9003_aic.h
…
ar9003_buffalo_initvals.h
…
ar9003_calib.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9003_eeprom.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
ar9003_eeprom.h
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9003_hw.c
wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation
2023-04-28 19:51:31 +03:00
ar9003_mac.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9003_mac.h
…
ar9003_mci.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9003_mci.h
…
ar9003_paprd.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9003_phy.c
wifi: ath9k: use u32 for txgain indexes
2023-09-20 16:16:12 +03:00
ar9003_phy.h
wifi: ath9k: delete some unused/duplicate macros
2023-12-18 20:44:58 +02:00
ar9003_rtt.c
…
ar9003_rtt.h
…
ar9003_wow.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
ar9330_1p1_initvals.h
…
ar9330_1p2_initvals.h
…
ar9340_initvals.h
…
ar9462_2p0_initvals.h
…
ar9462_2p1_initvals.h
…
ar9485_initvals.h
…
ar9565_1p0_initvals.h
…
ar9565_1p1_initvals.h
…
ar9580_1p0_initvals.h
…
ath9k_pci_owl_loader.c
wifi: ath9k: use unmanaged PCI functions in ath9k_pci_owl_loader
2024-08-01 17:58:47 +03:00
ath9k.h
wifi: ath9k: fix ath9k_use_msi declaration
2024-03-25 12:51:37 +02:00
beacon.c
wifi: mac80211: check beacon countdown is complete on per link basis
2024-02-21 15:19:03 +01:00
btcoex.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
btcoex.h
…
calib.c
wifi: ath9k: Use swap() to improve ath9k_hw_get_nf_hist_mid()
2024-08-01 17:59:20 +03:00
calib.h
…
channel.c
…
common-beacon.c
…
common-beacon.h
…
common-debug.c
…
common-debug.h
…
common-init.c
wifi: ath9k: Remove unnecessary (void*) conversions
2023-11-29 13:28:05 +02:00
common-init.h
…
common-spectral.c
wifi: ath9k: Remove unnecessary (void*) conversions
2023-11-29 13:28:05 +02:00
common-spectral.h
…
common.c
…
common.h
wifi: ath9k: Remove unused declarations
2023-08-22 16:39:23 +03:00
debug_sta.c
…
debug.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
debug.h
…
dfs_debug.c
wifi: mac80211: handle ieee80211_radar_detected() for MLO
2024-09-06 13:01:05 +02:00
dfs_debug.h
…
dfs.c
wifi: mac80211: handle ieee80211_radar_detected() for MLO
2024-09-06 13:01:05 +02:00
dfs.h
…
dynack.c
…
dynack.h
…
eeprom_4k.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
eeprom_9287.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
eeprom_def.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
eeprom.c
…
eeprom.h
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
gpio.c
…
hif_usb.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
hif_usb.h
wifi: ath9k_htc: fix format-truncation warning
2023-10-23 20:24:40 +03:00
htc_drv_beacon.c
wifi: ath9k_htc: Abort software beacon handling if disabled
2025-06-19 15:31:50 +02:00
htc_drv_debug.c
wifi: ath9k: Remove error checks when creating debugfs entries
2024-08-07 11:09:11 +03:00
htc_drv_gpio.c
…
htc_drv_init.c
wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
2024-02-02 13:39:58 +02:00
htc_drv_main.c
wifi: mac80211: inform the low level if drv_stop() is a suspend
2024-06-26 10:25:46 +02:00
htc_drv_txrx.c
wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
2024-02-02 13:39:58 +02:00
htc_hst.c
wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
2024-12-05 14:01:37 +01:00
htc_hst.h
…
htc.h
wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
2024-02-02 13:39:58 +02:00
hw-ops.h
…
hw.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
hw.h
…
init.c
wifi: ath9k: return by of_get_mac_address
2025-05-29 11:03:07 +02:00
Kconfig
wifi: mac80211: use wiphy locked debugfs helpers for agg_status
2023-11-27 11:25:01 +01:00
link.c
wifi: ath9k: Remove unnecessary (void*) conversions
2023-11-29 13:28:05 +02:00
mac.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
mac.h
wifi: ath9k: fix fortify warnings
2023-07-25 17:28:03 +03:00
main.c
wifi: mac80211: inform the low level if drv_stop() is a suspend
2024-06-26 10:25:46 +02:00
Makefile
…
mci.c
wifi: ath9k: Don't mark channelmap stack variable read-only in ath9k_mci_update_wlan_channels()
2023-04-19 17:24:47 +03:00
mci.h
…
pci.c
Revert "wifi: ath9k: use devm for request_irq()"
2024-08-10 10:21:58 +03:00
phy.h
…
recv.c
…
reg_aic.h
wifi: ath9k: delete some unused/duplicate macros
2023-12-18 20:44:58 +02:00
reg_mci.h
…
reg_wow.h
…
reg.h
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
rng.c
wifi: ath9k: remove most hidden macro dependencies on ah
2022-12-22 19:13:39 +02:00
tx99.c
wifi: ath9k: consistently use kstrtoX_from_user() functions
2023-08-22 16:37:53 +03:00
wmi.c
wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
2024-02-02 13:39:58 +02:00
wmi.h
…
wow.c
…
xmit.c
wifi: ath9k: ath9k_set_moredata(): fix sparse warnings
2024-03-25 12:51:37 +02:00