rpms/kernel/F-8 linux-2.6-iwlwifi-cve-2007-5938.patch, NONE, 1.1 kernel.spec, 1.275, 1.276

[John W. Linville (linville)]

Author: linville

Update of /cvs/pkgs/rpms/kernel/F-8
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv28592

Modified Files:
	kernel.spec 
Added Files:
	linux-2.6-iwlwifi-cve-2007-5938.patch 
Log Message:
Fix NULL ptr reference in iwlwifi (CVE-2007-5938)

linux-2.6-iwlwifi-cve-2007-5938.patch:

--- NEW FILE linux-2.6-iwlwifi-cve-2007-5938.patch ---
diff -up linux-2.6.23.noarch/drivers/net/wireless/iwlwifi/iwl3945-base.c.orig linux-2.6.23.noarch/drivers/net/wireless/iwlwifi/iwl3945-base.c
--- linux-2.6.23.noarch/drivers/net/wireless/iwlwifi/iwl3945-base.c.orig	2007-11-27 14:29:42.000000000 -0500
+++ linux-2.6.23.noarch/drivers/net/wireless/iwlwifi/iwl3945-base.c	2007-11-27 14:32:21.000000000 -0500
@@ -2901,6 +2901,10 @@ static void iwl3945_set_rate(struct iwl3
 	int i;
 
 	hw = iwl3945_get_hw_mode(priv, priv->phymode);
+	if (!hw) {
+		IWL_ERROR("Failed to set rate: unable to get hw mode\n");
+		return;
+	}
 
 	priv->active_rate = 0;
 	priv->active_rate_basic = 0;
diff -up linux-2.6.23.noarch/drivers/net/wireless/iwlwifi/iwl4965-base.c.orig linux-2.6.23.noarch/drivers/net/wireless/iwlwifi/iwl4965-base.c
--- linux-2.6.23.noarch/drivers/net/wireless/iwlwifi/iwl4965-base.c.orig	2007-11-27 14:29:42.000000000 -0500
+++ linux-2.6.23.noarch/drivers/net/wireless/iwlwifi/iwl4965-base.c	2007-11-27 14:32:21.000000000 -0500
@@ -2995,6 +2995,10 @@ static void iwl4965_set_rate(struct iwl4
 	int i;
 
 	hw = iwl4965_get_hw_mode(priv, priv->phymode);
+	if (!hw) {
+		IWL_ERROR("Failed to set rate: unable to get hw mode\n");
+		return;
+	}
 
 	priv->active_rate = 0;
 	priv->active_rate_basic = 0;


Index: kernel.spec
===================================================================
RCS file: /cvs/pkgs/rpms/kernel/F-8/kernel.spec,v
retrieving revision 1.275
retrieving revision 1.276
diff -u -r1.275 -r1.276
--- kernel.spec	27 Nov 2007 19:01:19 -0000	1.275
+++ kernel.spec	27 Nov 2007 19:47:02 -0000	1.276
@@ -669,6 +669,7 @@
 Patch670: linux-2.6-ata-quirk.patch
 Patch680: linux-2.6-wireless.patch
 Patch681: linux-2.6-wireless-pending.patch
+Patch682: linux-2.6-iwlwifi-cve-2007-5938.patch
 Patch690: linux-2.6-at76.patch
 Patch691: linux-2.6-ath5k.patch
 Patch692: linux-2.6-zd1211rw-mac80211.patch
@@ -1258,6 +1259,9 @@
 # wireless patches staged for 2.6.25
 ApplyPatch linux-2.6-wireless-pending.patch
 
+# fix CVE-2007-5938
+ApplyPatch linux-2.6-iwlwifi-cve-2007-5938.patch
+
 # Add misc wireless bits from upstream wireless tree
 ApplyPatch linux-2.6-at76.patch
 ApplyPatch linux-2.6-ath5k.patch
@@ -1956,6 +1960,9 @@
 
 
 %changelog
+* Tue Nov 27 2007 John W. Linville <linville at redhat.com>
+* Fix NULL ptr reference in iwlwifi (CVE-2007-5938)
+
 * Tue Nov 27 2007 Chuck Ebbert <cebbert at redhat.com>
 - ALSA 1.0.15 20071120