]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3ab7882) | patch
rtw88: fix use after free in rtw_hw_scan_update_probe_req()
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 3 Feb 2022 08:25:32 +0000 (11:25 +0300)
committerKalle Valo <kvalo@kernel.org>
Thu, 10 Feb 2022 08:32:25 +0000 (10:32 +0200)
commit47f363ae3025dee3b1f6ce8918712cf0b9f9ee91
tree792c10a63f92cedb8cafdf3ea4bbf056e92c7cd5tree | snapshot
parent3ab7882a2b87c5929b32f9cdedd70a7fcb601feacommit | diff
rtw88: fix use after free in rtw_hw_scan_update_probe_req()

This code needs to use skb_queue_walk_safe() instead of skb_queue_walk()
because it frees the list iterator.

Fixes: 42c3b23b8a37 ("rtw88: fix memory overrun and memory leak during hw_scan")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Ping-Ke Shih <pkshih@realtek.com>
Signed-off-by: Kalle Valo <kvalo@kernel.org>
Link: https://lore.kernel.org/r/20220203082532.GA25151@kili
drivers/net/wireless/realtek/rtw88/fw.c diff | blob | history
Linux Kernel Source Tree.