tag 8f4802c378385959fed64cbf9f1b11b188e6a9c0
tagger Kalle Valo <kvalo@codeaurora.org> Tue Mar 10 15:47:22 2015 +0200
object 3f1615340acea54e21f4b9d4d65921540dca84b2

iwlwifi:

* fix ROC removal - avoids a firmware crash
* fix throughput regression on iwldvm devices
* fix panic in BT Coex
* fixes in rate control
* fixes in scan

b43:

* fix support for 5 GHz only BCM43228 model

rtlwifi:

* improve handling of IPv6 packets

brcmfmac:

* perform bound checking on vendor command buffer

commit 3f1615340acea54e21f4b9d4d65921540dca84b2
author Pontus Fuchs <pontusf@broadcom.com> Fri Mar 06 16:18:41 2015 +0100
committer Kalle Valo <kvalo@codeaurora.org> Sat Mar 07 10:52:30 2015 +0200
tree 36dd5fa76bba565410b585c491719c8197fc18f9
parent eb9f75d88ebc0c17c1025972e5298ab965fee31b

brcmfmac: Perform bound checking on vendor command buffer

A short or malformed vendor command buffer could cause reads outside
the command buffer.

Cc: stable@vger.kernel.org # v3.19
Signed-off-by: Pontus Fuchs <pontusf@broadcom.com>
[arend@broadcom.com: slightly modified debug trace output]
Signed-off-by: Arend van Spriel <arend@broadcom.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>