]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
rtw88: wow: fix size access error of probe request
authorChin-Yen Lee <timlee@realtek.com>
Wed, 28 Jul 2021 01:43:35 +0000 (09:43 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 18 Sep 2021 11:42:15 +0000 (13:42 +0200)
commitc5cd85c60d82b23453767e1c1de1e1d1626564a2
treefedf0586b114d3ac149c64b1871000938503c271
parentdc08a67d41f5480fd80cf4910ef5320ed5a7e1ac
rtw88: wow: fix size access error of probe request

[ Upstream commit 69c7044526d984df672b8d9b6d6998c34617cde4 ]

Current flow will lead to null ptr access because of trying
to get the size of freed probe-request packets. We store the
information of packet size into rsvd page instead and also fix
the size error issue, which will cause unstable behavoir of
sending probe request by wow firmware.

Signed-off-by: Chin-Yen Lee <timlee@realtek.com>
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/20210728014335.8785-6-pkshih@realtek.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/wireless/realtek/rtw88/fw.c
drivers/net/wireless/realtek/rtw88/fw.h