Hi, here's a pull request to net tree for v5.6, more info below. Please let me know if there are any problems. Kalle The following changes since commit c312840cd79061af37158cb42590931cfa364c1b: Revert "pktgen: Allow configuration of IPv6 source address range" (2020-01-27 13:49:33 +0100) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers.git tags/wireless-drivers-2020-02-08 for you to fetch changes up to d08f3010f4a32eec3c8aa771f03a1b342a1472fa: mt76: mt7615: fix max_nss in mt7615_eeprom_parse_hw_cap (2020-02-08 11:59:03 +0200) ---------------------------------------------------------------- wireless-drivers fixes for v5.6 First set of fixes for v5.6. Buffer overflow fixes to mwifiex, quite a few functionality fixes to iwlwifi and smaller fixes to other drivers. mwifiex * fix an unlock from a previous security fix * fix two buffer overflows libertas * fix two bugs from previous security fixes iwlwifi * fix module removal with multiple NICs * don't treat IGTK removal failure as an error * avoid FW crashes due to DTS measurement races * fix a potential use after free in FTM code * prevent a NULL pointer dereference in iwl_mvm_cfg_he_sta() * fix TDLS discovery * check all CPUs when trying to detect an error during resume rtw88 * fix clang warning mt76 * fix reading of max_nss value from a register ---------------------------------------------------------------- Andrei Otcheretianski (2): iwlwifi: mvm: Fix thermal zone registration iwlwifi: mvm: Check the sta is not NULL in iwl_mvm_cfg_he_sta() Avraham Stern (1): iwlwifi: mvm: avoid use after free for pmsr request Brian Norris (1): mwifiex: fix unbalanced locking in mwifiex_process_country_ie() Chin-Yen Lee (1): rtw88: Fix return value of rtw_wow_check_fw_status Emmanuel Grumbach (1): iwlwifi: mvm: fix TDLS discovery with the new firmware API Golan Ben Ami (1): iwlwifi: mvm: update the DTS measurement type Lorenzo Bianconi (1): mt76: mt7615: fix max_nss in mt7615_eeprom_parse_hw_cap Luca Coelho (1): iwlwifi: don't throw error when trying to remove IGTK Mordechay Goodstein (1): iwlwifi: d3: read all FW CPUs error info Nicolai Stange (2): libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held libertas: make lbs_ibss_join_existing() return error code on rates overflow Qing Xu (2): mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 52 ++++++++++++---- .../net/wireless/intel/iwlwifi/mvm/ftm-initiator.c | 5 +- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 10 ++- drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 10 ++- drivers/net/wireless/intel/iwlwifi/mvm/tdls.c | 10 ++- .../net/wireless/intel/iwlwifi/mvm/time-event.c | 71 ++++++++++++++++++---- .../net/wireless/intel/iwlwifi/mvm/time-event.h | 4 +- drivers/net/wireless/intel/iwlwifi/mvm/tt.c | 10 +-- drivers/net/wireless/marvell/libertas/cfg.c | 2 + drivers/net/wireless/marvell/mwifiex/scan.c | 7 +++ drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 1 + drivers/net/wireless/marvell/mwifiex/wmm.c | 4 ++ drivers/net/wireless/mediatek/mt76/mt7615/eeprom.c | 3 +- drivers/net/wireless/realtek/rtw88/wow.c | 23 ++++--- 14 files changed, 159 insertions(+), 53 deletions(-)