Felix Fietkau 40dccfb225 mac80211: drop spoofed packets in ad-hoc mode ... commit 6329b8d917adc077caa60c2447385554130853a3 upstream. If an Ad-Hoc node receives packets with the Cell ID or its own MAC address as source address, it hits a WARN_ON in sta_info_insert_check() With many packets, this can massively spam the logs. One way that this can easily happen is through having Cisco APs in the area with rouge AP detection and countermeasures enabled. Such Cisco APs will regularly send fake beacons, disassoc and deauth packets that trigger these warnings. To fix this issue, drop such spoofed packets early in the rx path. Reported-by: Thomas Huehn <thomas@net.t-labs.tu-berlin.de> Signed-off-by: Felix Fietkau <nbd@openwrt.org> Signed-off-by: Johannes Berg <johannes.berg@intel.com> [bwh: Backported to 3.2: use compare_ether_addr() instead of ether_addr_equal()] Signed-off-by: Ben Hutchings <ben@decadent.org.uk> Cc: Qiang Huang <h.huangqiang@huawei.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-06-07 16:02:15 -07:00
..
9p	9p: fix off by one causing access violations and memory corruption	2013-07-28 16:26:05 -07:00
802	…
8021q	vlan: Set correct source MAC address with TX VLAN offload enabled	2014-04-26 17:13:16 -07:00
appletalk	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
atm	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
ax25	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
batman-adv	batman-adv: fix random jitter calculation	2013-01-11 09:07:03 -08:00
bluetooth	Bluetooth: Fix removing Long Term Key	2014-04-26 17:13:19 -07:00
bridge	netfilter: Can't fail and free after table replacement	2014-05-18 05:25:56 -07:00
caif	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
can	can: gw: use kmem_cache_free() instead of kfree()	2013-04-12 09:38:47 -07:00
ceph	libceph: resend all writes after the osdmap loses the full flag	2014-03-30 21:40:30 -07:00
core	net-gro: reset skb->truesize in napi_reuse_skb()	2014-06-07 16:02:00 -07:00
dcb	dcbnl: fix various netlink info leaks	2013-03-20 13:05:02 -07:00
dccp	inet: Fix kmemleak in tcp_v4/6_syn_recv_sock and dccp_v4/6_request_recv_sock	2013-01-11 09:07:14 -08:00
decnet	…
dns_resolver	…
dsa	…
econet	…
ethernet	…
ieee802154	6lowpan: Uncompression of traffic class field was incorrect	2013-12-08 07:29:41 -08:00
ipv4	ipv4: initialise the itag variable in __mkroute_input	2014-06-07 16:02:00 -07:00
ipv6	ipv6: Limit mtu to 65575 bytes	2014-06-07 16:01:59 -07:00
ipx	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
irda	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
iucv	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
key	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
l2tp	l2tp: take PMTU from tunnel UDP socket	2014-06-07 16:01:58 -07:00
lapb	…
llc	net: llc: fix use after free in llc_ui_recvmsg	2014-01-15 15:27:11 -08:00
mac80211	mac80211: drop spoofed packets in ad-hoc mode	2014-06-07 16:02:15 -07:00
netfilter	netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages	2014-04-03 11:58:46 -07:00
netlabel	netlabel: improve domain mapping validation	2013-06-27 11:27:31 -07:00
netlink	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
netrom	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
nfc	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
openvswitch	…
packet	af_packet: block BH in prb_shutdown_retire_blk_timer()	2013-12-08 07:29:42 -08:00
phonet	inet: prevent leakage of uninitialized memory to user in recv syscalls	2013-12-08 07:29:41 -08:00
rds	rds: prevent dereference of a NULL device in rds_iw_laddr_check	2014-04-26 17:13:18 -07:00
rfkill	…
rose	net: rose: restore old recvmsg behavior	2014-01-15 15:27:11 -08:00
rxrpc	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
sched	act_mirred: do not drop packets when fails to mirror it	2014-06-07 16:02:00 -07:00
sctp	net: sctp: test if association is dead in sctp_wake_up_waiters	2014-06-07 16:01:58 -07:00
sunrpc	SUNRPC: Prevent an rpc_task wakeup race	2014-03-11 16:10:08 -07:00
tipc	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
unix	net: unix: non blocking recvmsg() should not return -EINTR	2014-04-26 17:13:16 -07:00
wanrouter	…
wimax	…
wireless	cfg80211: check wdev->netdev in connection work	2014-06-07 16:02:14 -07:00
x25	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:41 -08:00
xfrm	xfrm_user: ensure user supplied esn replay window is valid	2012-10-13 05:38:41 +09:00
Kconfig	…
Makefile	…
compat.c	x86, x32: Correct invalid use of user timespec in the kernel	2014-02-06 11:05:46 -08:00
nonet.c	…
socket.c	net: socket: error on a negative msg_namelen	2014-04-26 17:13:17 -07:00
sysctl_net.c	…