pull-request: wireless-drivers-2020-02-08

From: Kalle Valo
Date: Sat Feb 08 2020 - 06:03:33 EST


Hi,

here's a pull request to net tree for v5.6, more info below. Please let
me know if there are any problems.

Kalle

The following changes since commit c312840cd79061af37158cb42590931cfa364c1b:

Revert "pktgen: Allow configuration of IPv6 source address range" (2020-01-27 13:49:33 +0100)

are available in the git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers.git tags/wireless-drivers-2020-02-08

for you to fetch changes up to d08f3010f4a32eec3c8aa771f03a1b342a1472fa:

mt76: mt7615: fix max_nss in mt7615_eeprom_parse_hw_cap (2020-02-08 11:59:03 +0200)

----------------------------------------------------------------
wireless-drivers fixes for v5.6

First set of fixes for v5.6. Buffer overflow fixes to mwifiex, quite a
few functionality fixes to iwlwifi and smaller fixes to other drivers.

mwifiex

* fix an unlock from a previous security fix

* fix two buffer overflows

libertas

* fix two bugs from previous security fixes

iwlwifi

* fix module removal with multiple NICs

* don't treat IGTK removal failure as an error

* avoid FW crashes due to DTS measurement races

* fix a potential use after free in FTM code

* prevent a NULL pointer dereference in iwl_mvm_cfg_he_sta()

* fix TDLS discovery

* check all CPUs when trying to detect an error during resume

rtw88

* fix clang warning

mt76

* fix reading of max_nss value from a register

----------------------------------------------------------------
Andrei Otcheretianski (2):
iwlwifi: mvm: Fix thermal zone registration
iwlwifi: mvm: Check the sta is not NULL in iwl_mvm_cfg_he_sta()

Avraham Stern (1):
iwlwifi: mvm: avoid use after free for pmsr request

Brian Norris (1):
mwifiex: fix unbalanced locking in mwifiex_process_country_ie()

Chin-Yen Lee (1):
rtw88: Fix return value of rtw_wow_check_fw_status

Emmanuel Grumbach (1):
iwlwifi: mvm: fix TDLS discovery with the new firmware API

Golan Ben Ami (1):
iwlwifi: mvm: update the DTS measurement type

Lorenzo Bianconi (1):
mt76: mt7615: fix max_nss in mt7615_eeprom_parse_hw_cap

Luca Coelho (1):
iwlwifi: don't throw error when trying to remove IGTK

Mordechay Goodstein (1):
iwlwifi: d3: read all FW CPUs error info

Nicolai Stange (2):
libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held
libertas: make lbs_ibss_join_existing() return error code on rates overflow

Qing Xu (2):
mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()

drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 52 ++++++++++++----
.../net/wireless/intel/iwlwifi/mvm/ftm-initiator.c | 5 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 10 ++-
drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 10 ++-
drivers/net/wireless/intel/iwlwifi/mvm/tdls.c | 10 ++-
.../net/wireless/intel/iwlwifi/mvm/time-event.c | 71 ++++++++++++++++++----
.../net/wireless/intel/iwlwifi/mvm/time-event.h | 4 +-
drivers/net/wireless/intel/iwlwifi/mvm/tt.c | 10 +--
drivers/net/wireless/marvell/libertas/cfg.c | 2 +
drivers/net/wireless/marvell/mwifiex/scan.c | 7 +++
drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 1 +
drivers/net/wireless/marvell/mwifiex/wmm.c | 4 ++
drivers/net/wireless/mediatek/mt76/mt7615/eeprom.c | 3 +-
drivers/net/wireless/realtek/rtw88/wow.c | 23 ++++---
14 files changed, 159 insertions(+), 53 deletions(-)