]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
wifi: mwifiex: avoid possible NULL skb pointer dereference
authorDmitry Antipov <dmantipov@yandex.ru>
Mon, 14 Aug 2023 09:49:57 +0000 (12:49 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 19 Sep 2023 10:22:34 +0000 (12:22 +0200)
commitd7fd24b8d1bb54c5bcf583139e11a5e651e0263c
treef10ab9e199b13e47af562d77bfd97debafd3f3d4
parent71ce8be48bf02f7d0593f6858ee1dacff0745002
wifi: mwifiex: avoid possible NULL skb pointer dereference

[ Upstream commit 35a7a1ce7c7d61664ee54f5239a1f120ab95a87e ]

In 'mwifiex_handle_uap_rx_forward()', always check the value
returned by 'skb_copy()' to avoid potential NULL pointer
dereference in 'mwifiex_uap_queue_bridged_pkt()', and drop
original skb in case of copying failure.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 838e4f449297 ("mwifiex: improve uAP RX handling")
Acked-by: Brian Norris <briannorris@chromium.org>
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Signed-off-by: Kalle Valo <kvalo@kernel.org>
Link: https://lore.kernel.org/r/20230814095041.16416-1-dmantipov@yandex.ru
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/wireless/marvell/mwifiex/uap_txrx.c