Felix Fietkau 280ba51d60
mac80211: minstrel_ht: fix a crash in rate sorting ...
The commit 5935839ad73583781b8bbe8d91412f6826e218a4
"mac80211: improve minstrel_ht rate sorting by throughput & probability"
introduced a crash on rate sorting that occurs when the rate added to
the sorting array is faster than all the previous rates. Due to an
off-by-one error, it reads the rate index from tp_list[-1], which
contains uninitialized stack garbage, and then uses the resulting index
for accessing the group rate stats, leading to a crash if the garbage
value is big enough.
Cc: Thomas Huehn <thomas@net.t-labs.tu-berlin.de>
Reported-by: Jouni Malinen <j@w1.fi>
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
2014-11-18 22:39:16 +01:00
2014-11-06 12:42:22 +01:00
2013-10-11 15:38:20 +02:00
2013-12-18 10:33:06 +01:00
2013-12-18 10:33:06 +01:00
2014-09-03 13:40:38 +02:00
2014-06-23 14:22:25 +02:00
2014-10-09 11:01:58 +02:00
2014-02-04 21:48:21 +01:00
2014-09-08 11:14:56 -04:00
2013-10-28 15:05:28 +01:00
2013-03-18 20:10:04 +01:00
2010-12-13 15:23:29 -05:00
2014-09-11 13:37:02 +02:00
2014-04-09 14:49:43 +02:00
2014-09-15 14:51:23 -04:00
2008-03-06 15:30:46 -05:00
2014-09-11 13:37:02 +02:00
2014-04-09 14:49:43 +02:00
2014-09-05 13:54:07 +02:00
2014-06-23 11:05:33 +02:00
2009-07-10 15:01:49 -04:00
2014-07-21 12:14:04 +02:00
2014-10-29 16:37:45 +01:00
2014-10-29 16:37:45 +01:00
2014-10-30 15:48:32 +01:00
2014-06-23 11:05:23 +02:00
2014-09-11 12:07:23 +02:00
2013-12-16 11:29:48 +01:00
2013-08-01 10:48:49 +02:00
2013-08-01 10:48:49 +02:00
2014-09-05 13:52:06 +02:00
2014-06-23 11:05:33 +02:00
2014-07-15 16:27:00 -07:00
2014-08-27 12:14:10 +02:00
2014-09-08 11:14:56 -04:00
2014-03-05 15:49:54 +01:00
2014-04-29 17:59:27 +02:00
2014-10-29 16:37:45 +01:00
2013-11-25 20:51:55 +01:00
2008-07-08 14:16:01 -04:00
2014-04-09 14:49:43 +02:00
2014-10-29 16:37:54 +01:00
2014-06-23 14:22:25 +02:00
2014-06-23 14:22:25 +02:00
2014-10-14 11:16:16 +02:00
2014-06-23 11:05:23 +02:00
2014-10-20 16:37:01 +02:00
2014-10-20 16:37:01 +02:00
2014-11-18 22:39:16 +01:00
2014-09-11 12:10:14 +02:00
2014-09-11 12:08:31 +02:00
2014-09-11 12:08:31 +02:00
2014-11-03 14:28:50 +01:00
2014-09-05 13:52:06 +02:00
2014-10-29 16:37:45 +01:00
2014-09-26 15:39:24 -04:00
2014-10-09 10:33:29 +02:00
2014-09-11 12:18:47 +02:00
2014-09-11 12:25:22 +02:00
2013-12-18 10:33:06 +01:00
2011-07-08 11:11:19 -04:00
2012-06-24 11:33:18 +02:00
2014-09-05 13:54:07 +02:00
2014-09-26 15:39:24 -04:00
2014-09-08 10:52:00 +02:00
2014-07-21 12:14:04 +02:00
2014-06-23 11:05:31 +02:00
2012-03-13 14:54:16 -04:00
2014-09-05 13:52:06 +02:00
2012-06-20 17:35:22 +02:00
2014-09-08 11:22:42 +02:00
2013-11-25 20:50:52 +01:00
280ba51d60