projects / openwrt / openwrt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 834bd86) | patch
mac80211: brcmfmac: fix use-after-free & possible NULL pointer dereference
authorRafał Miłecki <[email protected]>
Mon, 7 Jan 2019 16:11:23 +0000 (17:11 +0100)
committerRafał Miłecki <[email protected]>
Tue, 8 Jan 2019 10:46:24 +0000 (11:46 +0100)
commit9d4eed6837c014380d16ec6824b643d25731b927
treedaf9ca93903d0a60979b6486f7749937b9c51638tree | snapshot
parent834bd864245293d26bc9ca1ee956799de5865b37commit | diff
mac80211: brcmfmac: fix use-after-free & possible NULL pointer dereference

1) Using fwctx variable after brcmf_fw_request_done() was executed meant
   accessing freed memory.
2) Using fwctx->completion for the wait_for_completion_timeout() call
   could reuslt in NULL pointer dereference on fw loading error or if
   brcmf_fw_request_done() was executed quickly enough.

Signed-off-by: Rafał Miłecki <[email protected]>
(cherry picked from commit 529c95cc15dc9fcc7709400cc921f2a3c03cd263)
package/kernel/mac80211/patches/860-brcmfmac-register-wiphy-s-during-module_init.patch diff | blob | history
OpenWrt Source Repository