40a9a82991
This patch cleans uCode key table bit map iwl_clear_stations_table since all stations are cleared also the key table must be. Since the keys are not removed properly on suspend by mac80211 this may result in exhausting key table on resume leading to memory corruption during removal This patch also fixes a memory corruption problem reported in http://marc.info/?l=linux-wireless&m=122641417231586&w=2 and tracked in http://bugzilla.kernel.org/show_bug.cgi?id=12040. When the key is removed a second time the offset is set to 255 - this index is not valid for the ucode_key_table and corrupts the eeprom pointer (which is 255 bits from ucode_key_table). Signed-off-by: Tomas Winkler <tomas.winkler@intel.com> Signed-off-by: Zhu Yi <yi.zhu@intel.com> Reported-by: Carlos R. Mafra <crmafra2@gmail.com> Reported-by: Lukas Hejtmanek <xhejtman@ics.muni.cz> Signed-off-by: John W. Linville <linville@tuxdriver.com> |
||
---|---|---|
.. | ||
iwl3945-base.c | ||
iwl-3945-commands.h | ||
iwl-3945-core.h | ||
iwl-3945-debug.h | ||
iwl-3945-hw.h | ||
iwl-3945-io.h | ||
iwl-3945-led.c | ||
iwl-3945-led.h | ||
iwl-3945-rs.c | ||
iwl-3945-rs.h | ||
iwl-3945.c | ||
iwl-3945.h | ||
iwl-4965-hw.h | ||
iwl-4965.c | ||
iwl-5000-hw.h | ||
iwl-5000.c | ||
iwl-agn-rs.c | ||
iwl-agn-rs.h | ||
iwl-agn.c | ||
iwl-calib.c | ||
iwl-calib.h | ||
iwl-commands.h | ||
iwl-core.c | ||
iwl-core.h | ||
iwl-csr.h | ||
iwl-debug.h | ||
iwl-debugfs.c | ||
iwl-dev.h | ||
iwl-eeprom.c | ||
iwl-eeprom.h | ||
iwl-fh.h | ||
iwl-hcmd.c | ||
iwl-helpers.h | ||
iwl-io.h | ||
iwl-led.c | ||
iwl-led.h | ||
iwl-power.c | ||
iwl-power.h | ||
iwl-prph.h | ||
iwl-rfkill.c | ||
iwl-rfkill.h | ||
iwl-rx.c | ||
iwl-scan.c | ||
iwl-spectrum.h | ||
iwl-sta.c | ||
iwl-sta.h | ||
iwl-tx.c | ||
Kconfig | ||
Makefile |