Received: by 2002:a05:6a10:9848:0:0:0:0 with SMTP id x8csp518141pxf; Thu, 8 Apr 2021 07:46:12 -0700 (PDT) X-Google-Smtp-Source: ABdhPJysnkxUX2hCEDSzOvn7UOTs7w4lruiBu5bfnf4KLlMTBcqKOKEY56/DNx6I/cejSsFZHHua X-Received: by 2002:a65:5bca:: with SMTP id o10mr8538008pgr.248.1617893171992; Thu, 08 Apr 2021 07:46:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1617893171; cv=none; d=google.com; s=arc-20160816; b=OcQwkIaE9CsRNrdHYevwHvVQvjYzJoONa8yTMKkgSIL2w8yB42G6flrVs4pCcKZhwj Sm6E/ZaihvdctKmVj1m5idLgEhvg6VWNptLiU0miAripBTG7Fjiwe9lftDJ199Q1u7WO SfS+KAYrOwKs3CZURX8BLBzTHqoJ+pHmjG53eftzvzbSMbFshQbYEYCVvV6NINI2T5Zs TOaR9hhe8AhOCueZ1UAw9rQ+M28BmLUcqDwf/ftFoSzjOryJXqQKpFgS8p2wNGUcc05+ LMSIFHJuBcuKdBNt6mxluxLveIknalyLjNFBVXuO7PQmYOyGgs7HF7aLZeIMkwlm+34h /PTg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :message-id:date:subject:cc:to:from; bh=iAmsZWyvc+w/nRXbl4JKsxPR55DdqePEqFcqxRhm0Bs=; b=l5Ach9Uf5z1MFmgTNDovv4vH3JsoMVA7j0+FAjPNM+41ISGBvpfp3cWvq6ofrftZBI l/VMPQfC8yTCvM8JVRvnqR45P2QSp7OjqTdoQNycPEtTxYZVHutyTTvL5kQIOn31pTPh 5cp6uxsVO9xf91AFYPEJZGcKsu6E/+94w2X+A5NFEyx1br3nA1BjyrouzVZedzKDYENB F5YU9cj0N/jLly1EzV4A8+B0tj69Qam7TH8z3lJVB0veGTZhKXuZZBm4G0eItlocqJaQ Rj2n5o32gZn3lG07wNbB0zIC3XOt9eyATmQsabDFWXIahSdzvEYm/gQo3U+H17uiwIvK iYqg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id a25si15196518pgw.523.2021.04.08.07.45.59; Thu, 08 Apr 2021 07:46:11 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231712AbhDHOpz (ORCPT + 99 others); Thu, 8 Apr 2021 10:45:55 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:55782 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231480AbhDHOpz (ORCPT ); Thu, 8 Apr 2021 10:45:55 -0400 Received: from sipsolutions.net (s3.sipsolutions.net [IPv6:2a01:4f8:191:4433::2]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 04DF5C061760; Thu, 8 Apr 2021 07:45:44 -0700 (PDT) Received: by sipsolutions.net with esmtpsa (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.94) (envelope-from ) id 1lUVug-0092nJ-B3; Thu, 08 Apr 2021 16:45:42 +0200 From: Johannes Berg To: netdev@vger.kernel.org Cc: linux-wireless@vger.kernel.org Subject: pull-request: mac80211 2021-04-08.2 Date: Thu, 8 Apr 2021 16:45:34 +0200 Message-Id: <20210408144535.56577-1-johannes@sipsolutions.net> X-Mailer: git-send-email 2.30.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: linux-wireless@vger.kernel.org Hi, Yes, I'm late with this, sorry about that. I've mostly restricted this to the most necessary fixes, though the virt_wifi one isn't but since that's not used a lot, it's harmless and included since it's obvious. This updated version includes another netlink buffer overrun fix, as reported by syzbot. The only thing that's bigger is the rfkill thing, but that's just since it adds a new version of the struct for userspace to use, since the change to the existing struct caused various breakage all around. Please pull and let me know if there's any problem. Thanks, johannes The following changes since commit 8a12f8836145ffe37e9c8733dce18c22fb668b66: net: hso: fix null-ptr-deref during tty device unregistration (2021-04-07 15:18:15 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git tags/mac80211-for-net-2021-04-08.2 for you to fetch changes up to 9a6847ba1747858ccac53c5aba3e25c54fbdf846: nl80211: fix beacon head validation (2021-04-08 16:43:05 +0200) ---------------------------------------------------------------- Various small fixes: * S1G beacon validation * potential leak in nl80211 * fast-RX confusion with 4-addr mode * erroneous WARN_ON that userspace can trigger * wrong time units in virt_wifi * rfkill userspace API breakage * TXQ AC confusing that led to traffic stopped forever * connection monitoring time after/before confusion * netlink beacon head validation buffer overrun ---------------------------------------------------------------- A. Cody Schuffelen (1): virt_wifi: Return micros for BSS TSF values Ben Greear (1): mac80211: fix time-is-after bug in mlme Du Cheng (1): cfg80211: remove WARN_ON() in cfg80211_sme_connect Johannes Berg (5): rfkill: revert back to old userspace API by default mac80211: fix TXQ AC confusion cfg80211: check S1G beacon compat element length nl80211: fix potential leak of ACL params nl80211: fix beacon head validation Seevalamuthu Mariappan (1): mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN drivers/net/wireless/virt_wifi.c | 5 ++- include/uapi/linux/rfkill.h | 80 ++++++++++++++++++++++++++++++++++------ net/mac80211/cfg.c | 4 +- net/mac80211/mlme.c | 5 ++- net/mac80211/tx.c | 2 +- net/rfkill/core.c | 7 ++-- net/wireless/nl80211.c | 10 +++-- net/wireless/scan.c | 14 ++++--- net/wireless/sme.c | 2 +- 9 files changed, 99 insertions(+), 30 deletions(-)