diff options
author | Rafał Miłecki <rafal@milecki.pl> | 2019-01-07 17:11:23 +0100 |
---|---|---|
committer | Rafał Miłecki <rafal@milecki.pl> | 2019-01-08 11:46:24 +0100 |
commit | 9d4eed6837c014380d16ec6824b643d25731b927 (patch) | |
tree | daf9ca93903d0a60979b6486f7749937b9c51638 /package/kernel/w1-gpio-custom/src | |
parent | 834bd864245293d26bc9ca1ee956799de5865b37 (diff) | |
download | upstream-9d4eed6837c014380d16ec6824b643d25731b927.tar.gz upstream-9d4eed6837c014380d16ec6824b643d25731b927.tar.bz2 upstream-9d4eed6837c014380d16ec6824b643d25731b927.zip |
mac80211: brcmfmac: fix use-after-free & possible NULL pointer dereference
1) Using fwctx variable after brcmf_fw_request_done() was executed meant
accessing freed memory.
2) Using fwctx->completion for the wait_for_completion_timeout() call
could reuslt in NULL pointer dereference on fw loading error or if
brcmf_fw_request_done() was executed quickly enough.
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit 529c95cc15dc9fcc7709400cc921f2a3c03cd263)
Diffstat (limited to 'package/kernel/w1-gpio-custom/src')
0 files changed, 0 insertions, 0 deletions