summaryrefslogtreecommitdiffstats
path: root/drivers/net/wireless
Commit message (Expand)AuthorAgeFilesLines
* mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()Qing Xu2020-06-111-0/+4
* mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()Qing Xu2020-06-111-0/+7
* iwlegacy: ensure loop counter addr does not wrap and cause an infinite loopColin Ian King2020-05-221-1/+1
* brcmfmac: Fix memory leak in brcmf_usbdev_qinitNavid Emamdoost2020-05-221-0/+1
* zd1211rw: fix storage endpoint lookupJohan Hovold2020-05-221-1/+1
* rsi_91x_usb: fix interface sanity checkJohan Hovold2020-05-221-1/+1
* orinoco_usb: fix interface sanity checkJohan Hovold2020-05-221-2/+2
* brcmfmac: fix interface sanity checkJohan Hovold2020-05-221-1/+1
* brcmfmac: abort and release host after errorGuenter Roeck2020-05-221-0/+2
* brcmfmac: Fix use after free in brcmf_sdio_readframes()Dan Carpenter2020-05-221-0/+1
* rsi: fix use-after-free on failed probe and unbindJohan Hovold2020-05-221-0/+10
* ath9k: fix storage endpoint lookupJohan Hovold2020-05-221-1/+1
* mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()qize wang2020-04-281-6/+64
* mwifiex: fix probable memory corruption while processing TDLS frameAvinash Patil2020-04-281-1/+3
* libertas: make lbs_ibss_join_existing() return error code on rates overflowNicolai Stange2020-04-281-0/+1
* libertas: don't exit from lbs_ibss_join_existing() with RCU read lock heldNicolai Stange2020-04-281-0/+1
* libertas: Fix two buffer overflows at parsing bss descriptorWen Huang2020-04-281-3/+13
* mwifiex: fix unbalanced locking in mwifiex_process_country_ie()Brian Norris2020-04-281-0/+1
* iwlwifi: check kasprintf() return valueJohannes Berg2020-02-112-0/+6
* ar5523: check NULL before memcpy() in ar5523_cmd()Denis Efremov2020-02-111-1/+2
* cw1200: Fix a signedness bug in cw1200_load_firmware()Dan Carpenter2020-02-111-3/+3
* ath9k_hw: fix uninitialized variable dataDenis Efremov2020-02-111-1/+1
* mwifiex: fix possible heap overflow in mwifiex_process_country_ie()Ganapathi Bhat2020-01-111-2/+11
* mwifiex: don't follow AP if country code received from EEPROMAmitkumar Karwar2020-01-112-1/+6
* mwifiex: Fix NL80211_TX_POWER_LIMITEDAdrian Bunk2020-01-113-6/+19
* mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ringNavid Emamdoost2019-12-101-1/+4
* mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_bufNavid Emamdoost2019-12-101-1/+3
* libertas_tf: Use correct channel range in lbtf_geo_initYueHaibing2019-12-101-1/+1
* rtlwifi: Fix potential overflow on P2P codeLaura Abbott2019-11-151-0/+6
* ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()Hui Peng2019-11-151-0/+8
* carl9170: fix misuse of device driver APIChristian Lamparter2019-10-311-22/+17
* mwifiex: fix 802.11n/WPA detectionBrian Norris2019-10-312-1/+3
* mwifiex: Don't abort on small, spec-compliant vendor IEsBrian Norris2019-10-314-13/+23
* ath6kl: add some bounds checkingDan Carpenter2019-09-231-1/+9
* p54usb: Fix race between disconnect and firmware loadingAlan Stern2019-09-231-25/+18
* mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settingsWen Huang2019-09-232-1/+11
* mwifiex: vendor_ie length check for parse WMM IEsKarthik D A2019-09-231-4/+4
* rsi: add fix for crash during assertionsSanjay Konduri2019-09-231-0/+1
* p54: drop device reference count if fails to enable devicePan Bian2019-09-231-1/+2
* mwl8k: Fix rate_idx underflowPetr Štetiar2019-09-231-4/+9
* at76c50x-usb: Don't register led_trigger if usb_register_driver failedYueHaibing2019-09-231-2/+2
* rt2x00: do not increment sequence number while re-transmittingVijayakumar Durai2019-08-133-17/+9
* mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()Takashi Iwai2019-07-091-7/+23
* mwifiex: Abort at too short BSS descriptor elementTakashi Iwai2019-07-091-0/+15
* mwifiex: Fix possible buffer overflows at parsing bss descriptorTakashi Iwai2019-07-091-0/+4
* libertas_tf: don't set URB_ZERO_PACKET on IN USB transferLubomir Rintel2019-07-091-2/+0
* brcmfmac: add length checks in scheduled scan result handlerArend Van Spriel2019-05-111-3/+11
* Revert "brcmfmac: assure SSID length from firmware is limited"Ben Hutchings2019-05-111-2/+0
* brcmfmac: add subtype check for event handling in data pathArend van Spriel2019-05-022-6/+15
* brcmfmac: revise handling events in receive pathArend van Spriel2019-05-022-17/+17