mwifiex: Fix an issue spotted by KASAN

Browse source

When an association command is sent to firmware but the process is
killed before the command response arrives, driver will try to
access bss_desc which is already freed. This issue is fixed by
checking return value of bss_start.

Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>

...

This commit is contained in:

Ganapathi Bhat 2016-06-16 18:52:21 +05:30 • committed by Kalle Valo

parent 08aba42fcc

commit 4699fc3f2d

2 changed files with 16 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

12

drivers/net/wireless/marvell/mwifiex/join.c

View file

4

drivers/net/wireless/marvell/mwifiex/sta_ioctl.c

View file