linux-stable/drivers/net/wireless
Andrei Otcheretianski 7a48064a42 iwlwifi: mvm: Check the sta is not NULL in iwl_mvm_cfg_he_sta()
[ Upstream commit 12d47f0ea5 ]

Fix a kernel panic by checking that the sta is not NULL.
This could happen during a reconfig flow, as mac80211 moves the sta
between all the states without really checking if the previous state was
successfully set. So, if for some reason we failed to add back the
station, subsequent calls to sta_state() callback will be done when the
station is NULL. This would result in a following panic:

BUG: unable to handle kernel NULL pointer dereference at
0000000000000040
IP: iwl_mvm_cfg_he_sta+0xfc/0x690 [iwlmvm]
[..]
Call Trace:
 iwl_mvm_mac_sta_state+0x629/0x6f0 [iwlmvm]
 drv_sta_state+0xf4/0x950 [mac80211]
 ieee80211_reconfig+0xa12/0x2180 [mac80211]
 ieee80211_restart_work+0xbb/0xe0 [mac80211]
 process_one_work+0x1e2/0x610
 worker_thread+0x4d/0x3e0
[..]

Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@intel.com>
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-02-24 08:37:01 +01:00
..
admtek treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 501 2019-06-19 17:09:56 +02:00
ath ath10k: correct the tlv len of ath10k_wmi_tlv_op_gen_config_pno_start 2020-02-24 08:36:32 +01:00
atmel drivers: net: Fix Kconfig indentation 2019-09-26 08:56:17 +02:00
broadcom b43legacy: Fix -Wcast-function-type 2020-02-24 08:36:37 +01:00
cisco airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE 2020-01-29 16:45:22 +01:00
intel iwlwifi: mvm: Check the sta is not NULL in iwl_mvm_cfg_he_sta() 2020-02-24 08:37:01 +01:00
intersil hostap: Adjust indentation in prism2_hostapd_add_sta 2020-02-24 08:36:58 +01:00
marvell libertas: make lbs_ibss_join_existing() return error code on rates overflow 2020-02-14 16:34:20 -05:00
mediatek mt76: mt76u: rely on usb_interface instead of usb_dev 2020-01-26 10:01:08 +01:00
quantenna qtnfmac: fix using skb after free 2019-12-31 16:45:28 +01:00
ralink rt2800: remove errornous duplicate condition 2020-01-26 10:01:06 +01:00
realtek rtw88: fix potential NULL skb access in TX ISR 2020-02-24 08:36:58 +01:00
rsi Revert "rsi: fix potential null dereference in rsi_probe()" 2020-02-05 21:22:53 +00:00
st cw1200: Fix a signedness bug in cw1200_load_firmware() 2020-01-23 08:22:55 +01:00
ti mac80211: pass the vif to cancel_remain_on_channel 2019-07-26 13:08:28 +02:00
zydas zd1211rw: fix storage endpoint lookup 2020-02-01 09:34:38 +00:00
Kconfig
mac80211_hwsim.c mac80211_hwsim: fix incorrect dev_alloc_name failure goto 2019-10-04 13:59:48 +02:00
mac80211_hwsim.h treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 2019-06-19 17:09:55 +02:00
Makefile
ray_cs.c
ray_cs.h
rayctl.h
rndis_wlan.c
virt_wifi.c virt_wifi: fix use-after-free in virt_wifi_newlink() 2019-12-17 19:55:55 +01:00
wl3501.h
wl3501_cs.c wl3501_cs: remove redundant variable rc 2019-07-24 14:45:24 +03:00