]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
cfg80211: prevent speculation on cfg80211_classify8021d() return
authorJohannes Berg <johannes.berg@intel.com>
Wed, 6 Feb 2019 11:17:14 +0000 (13:17 +0200)
committerStefan Bader <stefan.bader@canonical.com>
Wed, 24 Apr 2019 08:09:12 +0000 (10:09 +0200)
commit55a76bfaefeafd3767eba9765b9ec375dd4a0533
tree18e46bd01b061816641f94ad6fc65cc11a434c5c
parent3ea20817874764ac20b0fc12a152524f2f067ed5
cfg80211: prevent speculation on cfg80211_classify8021d() return

It's possible that the caller of cfg80211_classify8021d() uses the
value to index an array, like mac80211 in ieee80211_downgrade_queue().
Prevent speculation on the return value.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
CVE-2017-5753

(backported from commit 1fc9b7253382ce1a83d9a3e63e88d656eb63f263)
[juergh: Adjusted context.]
Signed-off-by: Juerg Haefliger <juergh@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
net/wireless/util.c