summaryrefslogtreecommitdiff
path: root/drivers/net/wireless
AgeCommit message (Expand)Author
2020-06-11mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()Qing Xu
2020-06-11mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()Qing Xu
2020-05-22iwlegacy: ensure loop counter addr does not wrap and cause an infinite loopColin Ian King
2020-05-22brcmfmac: Fix memory leak in brcmf_usbdev_qinitNavid Emamdoost
2020-05-22zd1211rw: fix storage endpoint lookupJohan Hovold
2020-05-22rsi_91x_usb: fix interface sanity checkJohan Hovold
2020-05-22orinoco_usb: fix interface sanity checkJohan Hovold
2020-05-22brcmfmac: fix interface sanity checkJohan Hovold
2020-05-22brcmfmac: abort and release host after errorGuenter Roeck
2020-05-22brcmfmac: Fix use after free in brcmf_sdio_readframes()Dan Carpenter
2020-05-22rsi: fix use-after-free on failed probe and unbindJohan Hovold
2020-05-22ath9k: fix storage endpoint lookupJohan Hovold
2020-04-28mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()qize wang
2020-04-28mwifiex: fix probable memory corruption while processing TDLS frameAvinash Patil
2020-04-28libertas: make lbs_ibss_join_existing() return error code on rates overflowNicolai Stange
2020-04-28libertas: don't exit from lbs_ibss_join_existing() with RCU read lock heldNicolai Stange
2020-04-28libertas: Fix two buffer overflows at parsing bss descriptorWen Huang
2020-04-28mwifiex: fix unbalanced locking in mwifiex_process_country_ie()Brian Norris
2020-02-11iwlwifi: check kasprintf() return valueJohannes Berg
2020-02-11ar5523: check NULL before memcpy() in ar5523_cmd()Denis Efremov
2020-02-11cw1200: Fix a signedness bug in cw1200_load_firmware()Dan Carpenter
2020-02-11ath9k_hw: fix uninitialized variable dataDenis Efremov
2020-01-11mwifiex: fix possible heap overflow in mwifiex_process_country_ie()Ganapathi Bhat
2020-01-11mwifiex: don't follow AP if country code received from EEPROMAmitkumar Karwar
2020-01-11mwifiex: Fix NL80211_TX_POWER_LIMITEDAdrian Bunk
2019-12-10mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ringNavid Emamdoost
2019-12-10mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_bufNavid Emamdoost
2019-12-10libertas_tf: Use correct channel range in lbtf_geo_initYueHaibing
2019-11-15rtlwifi: Fix potential overflow on P2P codeLaura Abbott
2019-11-15ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()Hui Peng
2019-10-31carl9170: fix misuse of device driver APIChristian Lamparter
2019-10-31mwifiex: fix 802.11n/WPA detectionBrian Norris
2019-10-31mwifiex: Don't abort on small, spec-compliant vendor IEsBrian Norris
2019-09-23ath6kl: add some bounds checkingDan Carpenter
2019-09-23p54usb: Fix race between disconnect and firmware loadingAlan Stern
2019-09-23mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settingsWen Huang
2019-09-23mwifiex: vendor_ie length check for parse WMM IEsKarthik D A
2019-09-23rsi: add fix for crash during assertionsSanjay Konduri
2019-09-23p54: drop device reference count if fails to enable devicePan Bian
2019-09-23mwl8k: Fix rate_idx underflowPetr Štetiar
2019-09-23at76c50x-usb: Don't register led_trigger if usb_register_driver failedYueHaibing
2019-08-13rt2x00: do not increment sequence number while re-transmittingVijayakumar Durai
2019-07-09mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()Takashi Iwai
2019-07-09mwifiex: Abort at too short BSS descriptor elementTakashi Iwai
2019-07-09mwifiex: Fix possible buffer overflows at parsing bss descriptorTakashi Iwai
2019-07-09libertas_tf: don't set URB_ZERO_PACKET on IN USB transferLubomir Rintel
2019-05-11brcmfmac: add length checks in scheduled scan result handlerArend Van Spriel
2019-05-11Revert "brcmfmac: assure SSID length from firmware is limited"Ben Hutchings
2019-05-02brcmfmac: add subtype check for event handling in data pathArend van Spriel
2019-05-02brcmfmac: revise handling events in receive pathArend van Spriel