linux/drivers/net/wireless/intel
Johannes Berg f30e8af109 wifi: iwlwifi: read txq->read_ptr under lock
commit c2ace63006 upstream.

If we read txq->read_ptr without lock, we can read the same
value twice, then obtain the lock, and reclaim from there
to two different places, but crucially reclaim the same
entry twice, resulting in the WARN_ONCE() a little later.
Fix that by reading txq->read_ptr under lock.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://msgid.link/20240319100755.bf4c62196504.I978a7ca56c6bd6f1bf42c15aa923ba03366a840b@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
[ Change read_ptr definition according to commit
413be839bfca9("wifi: iwlwifi: add a validity check of queue_id in iwl_txq_reclaim"). ]
Signed-off-by: Robert Garcia <rob_garcia@163.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2026-06-01 17:35:09 +02:00
..
ipw2x00 net: intel: fix PCI device ID conflict between i40e and ipw2200 2026-03-04 07:20:35 -05:00
iwlegacy wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() 2026-03-04 07:20:10 -05:00
iwlwifi wifi: iwlwifi: read txq->read_ptr under lock 2026-06-01 17:35:09 +02:00
Kconfig treewide: replace '---help---' in Kconfig files with 'help' 2020-06-14 01:57:21 +09:00
Makefile treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00