linux/drivers/net/wireless
Pengpeng Hou 8ecdeb8b8a wifi: rsi: validate beacon length before fixed buffer copy
rsi_prepare_beacon() copies the mac80211 beacon frame after
FRAME_DESC_SZ into a management skb whose usable tailroom may be smaller
than MAX_MGMT_PKT_SIZE after alignment.

Validate the beacon length against the actual tailroom before the copy
and skb_put(). Leave ownership of the management skb with the caller on
error, matching the existing rsi_send_beacon() cleanup path.

Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Link: https://patch.msgid.link/20260705084824.68105-1-pengpeng@iscas.ac.cn
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
History 2026-07-06 14:11:09 +02:00
..
admtek wifi: cfg80211/mac80211: Add support to get radio index 2025-06-24 15:19:27 +02:00
ath workqueue: Changes for v7.2 2026-06-17 11:57:44 +01:00
atmel wifi: at76c50x: refactor endpoint lookup 2026-04-08 08:33:40 +02:00
broadcom b43: add RF power offset for N-PHY r8 + radio 2057 r8 2026-06-10 10:27:56 +02:00
intel wifi: libipw: fix key index receive bound checks 2026-07-06 14:11:09 +02:00
intersil wifi: p54: validate RX frame length in p54_rx_eeprom_readback() 2026-07-06 14:11:07 +02:00
marvell wifi: libertas: reject short monitor TX frames 2026-07-06 14:11:08 +02:00
mediatek wifi: mt76: Drop unneeded mt76_register_debugfs_fops() return checks 2026-06-09 10:34:02 +00:00
microchip Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2026-05-21 15:09:02 -07:00
purelifi wifi: plfxlc: use module_usb_driver() macro 2026-05-20 11:58:39 +02:00
quantenna wifi: qtnfmac: topaz: defer IRQ enabling until IPC init 2026-06-03 14:11:56 +02:00
ralink wifi: ralink: RT2X00: init EEPROM properly 2026-07-06 14:11:08 +02:00
realtek bitmap updates for v7.2 2026-06-17 11:38:38 +01:00
rsi wifi: rsi: validate beacon length before fixed buffer copy 2026-07-06 14:11:09 +02:00
silabs wifi: move action code from per-type frame structs 2026-03-06 10:36:26 +01:00
st wifi: cw1200: Revert "Fix locking in error paths" 2026-05-04 09:08:24 +02:00
ti wifi: wlcore: enable the right set of ciphers 2026-06-04 13:21:26 +02:00
virtual wifi: mac80211_hwsim: avoid treating MCS as legacy rate index 2026-07-06 14:11:07 +02:00
zydas Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
Kconfig wifi: remove orphaned rndis_wlan driver 2023-10-30 19:30:33 +02:00
Makefile wifi: remove orphaned rndis_wlan driver 2023-10-30 19:30:33 +02:00