Received: by 2002:a25:1506:0:0:0:0:0 with SMTP id 6csp2853404ybv; Sun, 9 Feb 2020 09:00:22 -0800 (PST) X-Google-Smtp-Source: APXvYqyX5B2llx8XoO9QCkE2SEiH8b6RD+p71CAOZ5WsWHfRk7PcTRucb1wOrb8evS7XoTzjA5c2 X-Received: by 2002:a05:6808:9ba:: with SMTP id e26mr8430846oig.81.1581267622245; Sun, 09 Feb 2020 09:00:22 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1581267622; cv=none; d=google.com; s=arc-20160816; b=ZU/t0V7TDvlrald1SJmw3eagqF1rE4BcHzVUVwcoC3uOMja2Vw8aW0PTjjXDcY2PzN 970DqDqUDc4CYWRSoLdAkU3CvGNIqYUnZdHGcdOZBW7qkEXe4AFbcXWbtFZSd/VybCIX 19LQhJt78SPefo5q+iQKv3sfKRsn2Nh5FlJ98a1iRi122e/U3aaPjAWBnJrdB28hiN7m 9NOLcdU5kk24wy2Y/wMqQkVxE0QT897WRWKB8UyP++58+z2O/Z4H6Y3OMm/epP80MFAz yZv6SXPZ9T0iz6RhIfj9kp6iQwaukwqx8vcuJSzjrZJ4RD9pYr2UAj0sCg48sG/TVI8I j7UA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :message-id:date:subject:cc:to:from; bh=1nbH7Ou/tAHA2BgngDoYhl5ykUMr51Aw6Iu+xb6Z2WU=; b=xnI9ETnfWBwfBNih1lkM2SudmANzDaHk5JHlw1Y8UrRxfTvg4TjYHW2tbshUQAIzBc 9saQs8biKISbvmOYkaj22GkAEJfpvCZlq4ug7RC8bglme4DW6H/YpEdOVnLNGEeAjF05 DRpLq1K+L+JH9xE2I0PNfQe5JChxTzgSqlGPY065WzdG+24hOPmu0gvM+lsm+z+vEMIz I65vTXZrHS+uGSi3NlzsuBpbZvnxerTdAtIepapBZ1+1+AV290ItsaC0gEKfY4csZgL4 GWVEbnWlMM7inP148I0t9hHz8LH4Mbm2ycS+Go1khG9ZOGhZL7K4kqmdxs5suI4zUtVx j2hg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-wireless-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id q189si6819956oic.235.2020.02.09.09.00.12; Sun, 09 Feb 2020 09:00:22 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-wireless-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-wireless-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727817AbgBIQ7P (ORCPT + 99 others); Sun, 9 Feb 2020 11:59:15 -0500 Received: from smail.rz.tu-ilmenau.de ([141.24.186.67]:49160 "EHLO smail.rz.tu-ilmenau.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727725AbgBIQ7P (ORCPT ); Sun, 9 Feb 2020 11:59:15 -0500 Received: from isengard.fritz.box (unknown [84.174.247.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smail.rz.tu-ilmenau.de (Postfix) with ESMTPSA id 96D5E580065; Sun, 9 Feb 2020 17:59:12 +0100 (CET) From: Markus Theil To: johannes@sipsolutions.net Cc: linux-wireless@vger.kernel.org, Markus Theil Subject: [PATCH 0/8] iw: parse measurement pilot and fix scan bugs Date: Sun, 9 Feb 2020 17:58:54 +0100 Message-Id: <20200209165902.44110-1-markus.theil@tu-ilmenau.de> X-Mailer: git-send-email 2.25.0 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: linux-wireless-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-wireless@vger.kernel.org Besides adding a parser for the measurement pilot element, this series fixes several bugs found while fuzzing the scan code of iw. Markus Theil (8): iw: scan: parse measurement pilot element iw: scan: fix buffer over-read in print_ies() iw: scan: fix buffer over-read in operation class parsing iw: scan: fix buffer over-read in parsing roaming consortium iw: scan: fix buffer over-read in print_wifi_wps iw: scan: fix buffer over-read in print_p2p iw: scan: fix undefined behaviour in rm capa print iw: scan: fix undefined behaviour in print_vht_capa() scan.c | 71 +++++++++++++++++++++++++++++++++++++++++++++++----------- 1 file changed, 58 insertions(+), 13 deletions(-) -- 2.25.0