lkml.org 
[lkml]   [2022]   [Aug]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 5.19 1148/1157] wifi: nl80211: hold wdev mutex for tid config
    Date
    From: Johannes Berg <johannes.berg@intel.com>

    commit 206bbcf76121664e95a42e1c014c3fe168d07a3d upstream.

    We need wdev_chandef() in this code, which now requires
    the wdev mutex due to the per-link nature. Hold it here
    to make sure we can access the link.

    Reported-by: syzbot+b4e9aa0f32ffd9902442@syzkaller.appspotmail.com
    Fixes: 7b0a0e3c3a88 ("wifi: cfg80211: do some rework towards MLO link APIs")
    Signed-off-by: Johannes Berg <johannes.berg@intel.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    ---
    net/wireless/nl80211.c | 3 +++
    1 file changed, 3 insertions(+)

    --- a/net/wireless/nl80211.c
    +++ b/net/wireless/nl80211.c
    @@ -15285,6 +15285,8 @@ static int nl80211_set_tid_config(struct
    if (info->attrs[NL80211_ATTR_MAC])
    tid_config->peer = nla_data(info->attrs[NL80211_ATTR_MAC]);

    + wdev_lock(dev->ieee80211_ptr);
    +
    nla_for_each_nested(tid, info->attrs[NL80211_ATTR_TID_CONFIG],
    rem_conf) {
    ret = nla_parse_nested(attrs, NL80211_TID_CONFIG_ATTR_MAX,
    @@ -15306,6 +15308,7 @@ static int nl80211_set_tid_config(struct

    bad_tid_conf:
    kfree(tid_config);
    + wdev_unlock(dev->ieee80211_ptr);
    return ret;
    }


    \
     
     \ /
      Last update: 2022-08-16 06:58    [W:3.068 / U:0.056 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site