rtw89: fix null vif pointer when hw_scan fails

Browse source

Add this check to avoid crash by dereferencing a null pointer. When hwscan
fails due to no memory or dma failure, the scan flag in ieee80211_local is
cleared. So mac80211 determine that it's not hw_scan then calls
sw_scan_complete() with null vif, which is also freed during the fail.

Signed-off-by: Po Hao Huang <phhuang@realtek.com>
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
Signed-off-by: Kalle Valo <kvalo@kernel.org>
Link: https://lore.kernel.org/r/20220520071731.38563-3-pkshih@realtek.com

...

This commit is contained in:

Po Hao Huang 2022-05-20 15:17:27 +08:00 • committed by Kalle Valo

parent 28000f7baa

commit 6d7d1fef3f

2 changed files with 6 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

5

drivers/net/wireless/realtek/rtw89/core.c

View file

4

drivers/net/wireless/realtek/rtw89/fw.c

View file