From patchwork Thu Apr 8 14:45:34 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Johannes Berg X-Patchwork-Id: 12191657 X-Patchwork-Delegate: kuba@kernel.org Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-21.8 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PATCH,INCLUDES_PULL_REQUEST, MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS,USER_AGENT_GIT autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9FA2DC433B4 for ; Thu, 8 Apr 2021 14:45:46 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 69A8C610F7 for ; Thu, 8 Apr 2021 14:45:46 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231848AbhDHOp4 (ORCPT ); Thu, 8 Apr 2021 10:45:56 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:55782 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231480AbhDHOpz (ORCPT ); Thu, 8 Apr 2021 10:45:55 -0400 Received: from sipsolutions.net (s3.sipsolutions.net [IPv6:2a01:4f8:191:4433::2]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 04DF5C061760; Thu, 8 Apr 2021 07:45:44 -0700 (PDT) Received: by sipsolutions.net with esmtpsa (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.94) (envelope-from ) id 1lUVug-0092nJ-B3; Thu, 08 Apr 2021 16:45:42 +0200 From: Johannes Berg To: netdev@vger.kernel.org Cc: linux-wireless@vger.kernel.org Subject: pull-request: mac80211 2021-04-08.2 Date: Thu, 8 Apr 2021 16:45:34 +0200 Message-Id: <20210408144535.56577-1-johannes@sipsolutions.net> X-Mailer: git-send-email 2.30.2 MIME-Version: 1.0 Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org Hi, Yes, I'm late with this, sorry about that. I've mostly restricted this to the most necessary fixes, though the virt_wifi one isn't but since that's not used a lot, it's harmless and included since it's obvious. This updated version includes another netlink buffer overrun fix, as reported by syzbot. The only thing that's bigger is the rfkill thing, but that's just since it adds a new version of the struct for userspace to use, since the change to the existing struct caused various breakage all around. Please pull and let me know if there's any problem. Thanks, johannes The following changes since commit 8a12f8836145ffe37e9c8733dce18c22fb668b66: net: hso: fix null-ptr-deref during tty device unregistration (2021-04-07 15:18:15 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git tags/mac80211-for-net-2021-04-08.2 for you to fetch changes up to 9a6847ba1747858ccac53c5aba3e25c54fbdf846: nl80211: fix beacon head validation (2021-04-08 16:43:05 +0200) ---------------------------------------------------------------- Various small fixes: * S1G beacon validation * potential leak in nl80211 * fast-RX confusion with 4-addr mode * erroneous WARN_ON that userspace can trigger * wrong time units in virt_wifi * rfkill userspace API breakage * TXQ AC confusing that led to traffic stopped forever * connection monitoring time after/before confusion * netlink beacon head validation buffer overrun ---------------------------------------------------------------- A. Cody Schuffelen (1): virt_wifi: Return micros for BSS TSF values Ben Greear (1): mac80211: fix time-is-after bug in mlme Du Cheng (1): cfg80211: remove WARN_ON() in cfg80211_sme_connect Johannes Berg (5): rfkill: revert back to old userspace API by default mac80211: fix TXQ AC confusion cfg80211: check S1G beacon compat element length nl80211: fix potential leak of ACL params nl80211: fix beacon head validation Seevalamuthu Mariappan (1): mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN drivers/net/wireless/virt_wifi.c | 5 ++- include/uapi/linux/rfkill.h | 80 ++++++++++++++++++++++++++++++++++------ net/mac80211/cfg.c | 4 +- net/mac80211/mlme.c | 5 ++- net/mac80211/tx.c | 2 +- net/rfkill/core.c | 7 ++-- net/wireless/nl80211.c | 10 +++-- net/wireless/scan.c | 14 ++++--- net/wireless/sme.c | 2 +- 9 files changed, 99 insertions(+), 30 deletions(-)