Johannes Berg 45d787b8a9 wext: fix potential private ioctl memory content leak ... commit df6d02300f upstream. When a driver doesn't fill the entire buffer, old heap contents may remain, and if it also doesn't update the length properly, this old heap content will be copied back to userspace. It is very unlikely that this happens in any of the drivers using private ioctls since it would show up as junk being reported by iwpriv, but it seems better to be safe here, so use kzalloc. Reported-by: Jeff Mahoney <jeffm@suse.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: John W. Linville <linville@tuxdriver.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>		2010-10-28 21:04:15 -07:00
..
core.c	wireless: Add missing locking to cfg80211_dev_rename	2008-05-14 16:29:49 -04:00
core.h	cfg80211 API for channels/bitrates, mac80211 and driver conversion	2008-02-29 15:19:32 -05:00
Kconfig	net/wireless/Kconfig: clarify the description for CONFIG_WIRELESS_EXT_SYSFS	2008-09-02 15:03:19 -04:00
Makefile	cfg80211 API for channels/bitrates, mac80211 and driver conversion	2008-02-29 15:19:32 -05:00
nl80211.c	nl80211: fix dump callbacks	2008-07-29 16:55:08 -04:00
nl80211.h	[NL80211]: add netlink interface to cfg80211	2007-10-10 16:52:14 -07:00
radiotap.c	wireless: use get/put_unaligned_* helpers	2008-05-14 16:29:32 -04:00
reg.c	mac80211: implement EU regulatory domain	2008-06-14 12:18:03 -04:00
sysfs.c	Driver core: change add_uevent_var to use a struct	2007-10-12 14:51:01 -07:00
sysfs.h	[WIRELESS] cfg80211: New wireless config infrastructure.	2007-04-25 22:29:41 -07:00
util.c	cfg80211: don't export ieee80211_get_channel	2008-03-27 16:03:20 -04:00
wext.c	wext: fix potential private ioctl memory content leak	2010-10-28 21:04:15 -07:00