linux/drivers/net/wireless/iwlegacy
Stanislaw Gruszka 210787e82a iwl3945: fix possible il->txq NULL pointer dereference in delayed works
On il3945_down procedure we free tx queue data and nullify il->txq
pointer. After that we drop mutex and then cancel delayed works. There
is possibility, that after drooping mutex and before the cancel, some
delayed work will start and crash while trying to send commands to
the device. For example, here is reported crash in
il3945_bg_reg_txpower_periodic():
https://bugzilla.kernel.org/show_bug.cgi?id=42766#c10

Patch fix problem by adding il->txq check on works that send commands,
hence utilize tx queue.

Reported-by: Clemens Eisserer <linuxhippy@gmail.com>
Cc: stable@vger.kernel.org
Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2012-03-12 14:00:16 -04:00
..
3945-debug.c iwlegacy: checkpatch.pl fixes 2011-11-15 14:51:01 +01:00
3945-mac.c iwl3945: fix possible il->txq NULL pointer dereference in delayed works 2012-03-12 14:00:16 -04:00
3945-rs.c iwlegacy: random 3945-rs.c cleanups 2012-01-04 14:30:45 -05:00
3945.c iwl3945: fix possible il->txq NULL pointer dereference in delayed works 2012-03-12 14:00:16 -04:00
3945.h iwlegacy: 3945: simplify calculations of retry limit 2012-01-04 14:30:45 -05:00
4965-calib.c iwlegacy: checkpatch.pl fixes 2011-11-15 14:51:01 +01:00
4965-debug.c iwlegacy: checkpatch.pl fixes 2011-11-15 14:51:01 +01:00
4965-mac.c iwlegacy: 4965: remove one il4965_hdl_beacon 2012-01-04 14:30:45 -05:00
4965-rs.c iwlegacy: 4965-rs: cleanup il4965_rs_sta_dbgfs_rate_scale_data_read 2011-11-16 12:54:56 +01:00
4965.c iwlegacy: 4965: remove one il4965_hdl_beacon 2012-01-04 14:30:45 -05:00
4965.h iwlegacy: 4965: small tx_cmd build cleanup 2012-01-04 14:30:44 -05:00
commands.h iwlegacy: indentions and whitespaces 2011-11-15 14:45:59 +01:00
common.c iwlegacy: move some i/o helpers out of inline 2012-01-04 14:30:44 -05:00
common.h iwlegacy: move some i/o helpers out of inline 2012-01-04 14:30:44 -05:00
csr.h iwlegacy: indentions and whitespaces 2011-11-15 14:45:59 +01:00
debug.c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux 2011-11-22 14:05:46 -05:00
iwl-spectrum.h iwlegacy: rename iwl to il 2011-11-15 11:16:58 +01:00
Kconfig iwlegacy: merge iwl-debug.h into common.h 2011-11-15 14:25:21 +01:00
Makefile iwlegacy: rename iwl-debug.c to debug.c 2011-11-15 14:24:36 +01:00
prph.h iwlegacy: indentions and whitespaces 2011-11-15 14:45:59 +01:00