Mathy Vanhoef 11572d7d7f net80211: reject mixed plaintext/encrypted fragments ... ieee80211_defrag() accepts fragmented 802.11 frames in a protected Wi-Fi network even when some of the fragments are not encrypted. Track whether the fragments are encrypted or not and only accept successive ones if they match the state of the first fragment. This relates to section 6.3 in the 2021 Usenix "FragAttacks" (Fragment and Forge: Breaking Wi-Fi Through Frame Aggregation and Fragmentation) paper. Submitted by: Mathy Vanhoef (Mathy.Vanhoef kuleuven.be) Security: CVE-2020-26147 PR: 256118 Differential Revision: https://reviews.freebsd.org/D30663		2021-09-30 14:47:41 +00:00
..
amd64	minidump: De-duplicate the progress bar	2021-09-29 16:42:21 -03:00
arm	minidump: De-duplicate the progress bar	2021-09-29 16:42:21 -03:00
arm64	minidump: De-duplicate the progress bar	2021-09-29 16:42:21 -03:00
bsm	Add fspacectl(2), vn_deallocate(9) and VOP_DEALLOCATE(9).	2021-08-05 23:20:42 +08:00
cam	cam: Avoiding waking up doneq threads if we're dumping	2021-09-25 10:15:03 -04:00
cddl	kern: drop remaining references to removed makesyscalls.sh	2021-09-09 19:40:54 -05:00
compat	linprocfs: find cwd and root handling	2021-09-30 12:59:58 +02:00
conf	bluetooth: complete removal of ng_h4	2021-09-29 20:00:02 -06:00
contrib	ipfilter: Save time and cycles swapping bucket table sizes	2021-09-29 17:44:02 -07:00
crypto	crypto(4): Fix a few typos in camellia.c	2021-09-04 13:02:11 +02:00
ddb	Create sys/reg.h for the common code previously in machine/reg.h	2021-08-30 12:50:53 +01:00
dev	libpmc: fix the 'cycles' event alias on x86	2021-09-30 11:15:26 -03:00
dts	Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights	2021-08-08 10:42:24 -04:00
fs	fusefs: implement FUSE_NO_OPEN_SUPPORT and FUSE_NO_OPENDIR_SUPPORT	2021-09-26 21:57:29 -06:00
gdb
geom	Fix memory deadlock when GELI partition is used for swap.	2021-09-28 11:23:52 -07:00
gnu
i386	minidump: De-duplicate the progress bar	2021-09-29 16:42:21 -03:00
isa
kern	fd: add pwd_hold_proc	2021-09-30 12:49:51 +02:00
kgssapi
libkern	libkern: remove bcopy	2021-08-24 11:24:07 +00:00
mips	minidump: De-duplicate the progress bar	2021-09-29 16:42:21 -03:00
modules	modules: iichid: needs opt_acpi.h	2021-09-29 23:10:35 -05:00
net	pfctl: userspace adaptive syncookies configration	2021-09-29 15:11:54 +02:00
net80211	net80211: reject mixed plaintext/encrypted fragments	2021-09-30 14:47:41 +00:00
netgraph	bluetooth: complete removal of ng_h4	2021-09-29 20:00:02 -06:00
netinet	sctp: provide a specific stream scheduler function for FCFS	2021-09-29 02:08:37 +02:00
netinet6	sctp: Tighten up locking around sctp_aloc_assoc()	2021-09-11 10:15:21 -04:00
netipsec	ipsec: fix typo part2	2021-09-27 07:46:56 +02:00
netpfil	pf: hook up adaptive mode configuration	2021-09-29 15:11:54 +02:00
netsmb
nfs
nfsclient
nfsserver
nlm
ofed	socket: De-duplicate SBLOCKWAIT() definitions	2021-09-14 09:01:32 -04:00
opencrypto	opencrypto: Disallow requests which pass VERIFY_DIGEST without a MAC	2021-09-24 15:04:45 -04:00
powerpc	minidump: De-duplicate the progress bar	2021-09-29 16:42:21 -03:00
riscv	minidump: De-duplicate the progress bar	2021-09-29 16:42:21 -03:00
rpc	rpc: Convert an SOLISTENING check to an assertion	2021-09-17 14:19:05 -04:00
security	Add fspacectl(2), vn_deallocate(9) and VOP_DEALLOCATE(9).	2021-08-05 23:20:42 +08:00
sys	fd: add pwd_hold_proc	2021-09-30 12:49:51 +02:00
teken
tests	routing: add IPv6 fib validation procedure.	2021-08-16 23:04:01 +00:00
tools	makesyscalls: sprinkle some assert() on standard function calls	2021-09-24 20:55:56 -05:00
ufs	Avoid "consumer not attached in g_io_request" panic when disk lost	2021-09-27 20:04:51 -07:00
vm	minidump: De-duplicate is_dumpable()	2021-09-29 16:41:52 -03:00
x86	minidump: De-duplicate the progress bar	2021-09-29 16:42:21 -03:00
xdr
xen	xen: introduce xen_pv_disks_disabled()	2021-07-28 17:27:04 +02:00
Makefile