linux/drivers/net/wireless
Pavel Roskin 6b26dead3c rt2x00: fix memory corruption in rf cache, add a sanity check
Change rt2x00_rf_read() and rt2x00_rf_write() to subtract 1 from the rf
register number.  This is needed because the rf registers are enumerated
starting with one.  The size of the rf register cache is just enough to
hold all registers, so writing to the highest register was corrupting
memory.  Add a check to make sure that the rf register number is valid.

Signed-off-by: Pavel Roskin <proski@gnu.org>
Cc: stable@kernel.org
Acked-by: Ivo van Doorn <IvDoorn@gmail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2009-08-14 09:06:52 -04:00
..
ath ar9170: fix read & write outside array bounds 2009-08-10 16:41:01 -04:00
b43 b43: Add support for 4318E 2009-07-08 15:24:24 -04:00
b43legacy b43/b43legacy: fix radio LED initialization 2009-07-07 12:55:26 -04:00
hostap Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/torvalds/linux-2.6 2009-06-15 03:02:23 -07:00
ipw2x00 ipw2x00: Write outside array bounds 2009-08-07 13:09:28 -04:00
iwlwifi iwlagn: do not send key clear commands when rfkill enabled 2009-08-03 16:31:23 -04:00
iwmc3200wifi drivers/net/wireless: introduce missing kfree 2009-08-03 16:31:23 -04:00
libertas Revert "libertas: Read buffer overflow" 2009-08-12 17:37:52 -07:00
libertas_tf
orinoco netdev: restore MAC address set and validate operations 2009-07-12 14:20:02 -07:00
p54 p54spi: fix potential null deref in p54spi.c 2009-07-21 15:59:48 -04:00
prism54 net: fix network drivers ndo_start_xmit() return values (part 3) 2009-06-13 01:18:37 -07:00
rt2x00 rt2x00: fix memory corruption in rf cache, add a sanity check 2009-08-14 09:06:52 -04:00
rtl818x rtl8187: Fix for kernel oops when unloading with LEDs enabled 2009-07-21 12:07:42 -04:00
wl12xx
zd1211rw zd1211rw: fix unaligned access in zd_mac_rx 2009-08-03 16:31:22 -04:00
Kconfig Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/torvalds/linux-2.6 2009-06-15 03:02:23 -07:00
Makefile
adm8211.c
adm8211.h
airo.c airo: Buffer overflow 2009-07-27 15:19:36 -04:00
airo.h
airo_cs.c
arlan-main.c net: use symbolic values for ndo_start_xmit() return codes 2009-06-13 01:18:50 -07:00
arlan-proc.c
arlan.h
at76c50x-usb.c
at76c50x-usb.h
atmel.c net: use symbolic values for ndo_start_xmit() return codes 2009-06-13 01:18:50 -07:00
atmel.h
atmel_cs.c
atmel_pci.c
i82586.h
i82593.h
mac80211_hwsim.c mac80211_hwsim: fix use after free 2009-07-21 12:07:40 -04:00
mwl8k.c mwl8k: prevent module unload hang 2009-08-07 13:09:33 -04:00
netwave_cs.c
ray_cs.c Remove multiple KERN_ prefixes from printk formats 2009-07-08 10:30:03 -07:00
ray_cs.h
rayctl.h
rndis_wlan.c Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/torvalds/linux-2.6 2009-06-15 03:02:23 -07:00
strip.c Revert "NET: Fix locking issues in PPP, 6pack, mkiss and strip line disciplines." 2009-07-14 13:13:41 -07:00
wavelan.c net: use symbolic values for ndo_start_xmit() return codes 2009-06-13 01:18:50 -07:00
wavelan.h
wavelan.p.h
wavelan_cs.c Remove multiple KERN_ prefixes from printk formats 2009-07-08 10:30:03 -07:00
wavelan_cs.h
wavelan_cs.p.h
wl3501.h
wl3501_cs.c net: fix network drivers ndo_start_xmit() return values (part 3) 2009-06-13 01:18:37 -07:00
zd1201.c net: fix network drivers ndo_start_xmit() return values (part 3) 2009-06-13 01:18:37 -07:00
zd1201.h