Dan Carpenter e4e02da2ef rndis_wlan: prevent integer overflow in indication() ...

If we pick a high value for "offset" then it could lead to an integer
overflow and we would get past the check for:
	if (offset + len > buflen) { ...

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Jussi Kivilinna <jussi.kivilinna@mbnet.fi>
Signed-off-by: John W. Linville <linville@tuxdriver.com>

2012-03-05 15:23:16 -05:00

..

ath

ath9k: make use of list_for_each_entry_safe

2012-03-05 15:23:14 -05:00

b43

b43: prevent firmware on bcm5354 from taking over wrong GPIO pins

2012-03-05 15:23:14 -05:00

b43legacy

ssb: remove 5GHz antenna gain from sprom

2012-03-05 15:20:49 -05:00

brcm80211

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless

2012-02-29 14:53:21 -05:00

hostap

hostap_cs: add ID for Canon K30225

2011-11-28 14:44:00 -05:00

ipw2x00

ipw2x00: remove ipw2100_rates_11b[]

2012-02-29 14:11:33 -05:00

iwlegacy

iwlegacy: remove unused enum il4965_calib_enabled_state

2012-02-29 14:14:55 -05:00

iwlwifi

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless

2012-02-29 14:53:21 -05:00

iwmc3200wifi

iwmc3200wifi: Fix typo in trace.h

2012-02-06 14:53:07 -05:00

libertas

Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2012-01-08 12:19:57 -08:00

libertas_tf

Merge branch 'driver-core-next' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2012-01-07 12:03:30 -08:00

mwifiex

mwifiex: fix bug in wildcard scan handling

2012-03-05 15:23:13 -05:00

orinoco

orinoco_usb: remove version definition

2012-01-24 15:03:04 -05:00

p54

mac80211: handle non-bufferable MMPDUs correctly

2012-02-29 14:14:54 -05:00

prism54

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless

2011-12-02 15:44:03 -05:00

rt2x00

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless

2012-02-29 14:53:21 -05:00

rtl818x

USB: convert drivers/net/* to use module_usb_driver()

2011-11-18 09:44:20 -08:00

rtlwifi

rtlwifi: Fix breakage in debug functions when built as a module

2012-02-27 14:05:45 -05:00

wl12xx

wl12xx: remove some dead code in wl1271_plt_init()

2012-02-15 12:25:26 +02:00

wl1251

wl1251: enable sparse endianess check by default

2012-02-15 08:38:27 +02:00

zd1211rw

zd1211rw: wait between setting hash table and powering radio on

2012-02-29 14:11:32 -05:00

adm8211.c

drivers/net: Add module.h to drivers who were implicitly using it

2011-10-31 19:31:07 -04:00

adm8211.h

…

airo_cs.c

…

airo.c

airo: Fix array bounds warning when moving packet payload.

2011-11-26 15:35:10 -05:00

airo.h

…

at76c50x-usb.c

wireless: at76c50x: follow rename pack_hex_byte to hex_byte_pack

2011-10-31 17:30:57 -07:00

at76c50x-usb.h

…

atmel_cs.c

…

atmel_pci.c

…

atmel.c

…

atmel.h

…

Kconfig

…

mac80211_hwsim.c

mac80211_hwsim: correctly line up a multiline printk

2012-02-27 14:06:43 -05:00

mac80211_hwsim.h

…

Makefile

iwlegacy: rename remaining IWLs to ILs

2011-11-15 11:25:42 +01:00

mwl8k.c

mwl8k: Remove BSSID from the firmware when the BSS is stopped

2012-02-06 14:55:42 -05:00

ray_cs.c

ray_cs: Fix array bounds warnings.

2011-11-26 15:41:29 -05:00

ray_cs.h

…

rayctl.h

ray_cs: Fix array bounds warnings.

2011-11-26 15:41:29 -05:00

rndis_wlan.c

rndis_wlan: prevent integer overflow in indication()

2012-03-05 15:23:16 -05:00

wl3501_cs.c

…

wl3501.h

…

zd1201.c

USB: convert drivers/net/* to use module_usb_driver()

2011-11-18 09:44:20 -08:00

zd1201.h

…