linux/drivers/net/wireless/intel/iwlwifi/mvm
Luca Coelho 1f9788f335 iwlwifi: mvm: fix potential NULL-dereference in iwl_mvm_reorder()
We try to access sta before we check for IS_ERR_OR_NULL(), so we may
end up accessing a NULL pointer.  To prevent that, move the conversion
from sta to mvm_sta below the check.

Fixes: b915c10174 ("iwlwifi: mvm: add reorder buffer per queue")
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
2016-06-10 13:34:34 +03:00
..
binding.c
coex.c cfg80211: remove enum ieee80211_band 2016-04-12 15:56:15 +02:00
constants.h iwlwifi: mvm: add a flag to disable checksum 2016-05-10 22:14:46 +03:00
d3.c iwlwifi: mvm: use helpers to get iwl_mvm_sta 2016-05-10 22:34:04 +03:00
debugfs-vif.c iwlwifi: mvm: use helpers to get iwl_mvm_sta 2016-05-10 22:34:04 +03:00
debugfs.c iwlwifi: mvm: add a new mvm reference type for RX data 2016-05-10 22:14:51 +03:00
debugfs.h
fw-api-coex.h
fw-api-d3.h iwlwifi: mvm: add firmware API name comment 2016-05-10 22:14:41 +03:00
fw-api-mac.h
fw-api-power.h
fw-api-rs.h
fw-api-rx.h iwlwifi: mvm: change RX sync notification to be an attribute and not a type 2016-05-10 22:14:40 +03:00
fw-api-scan.h iwlwifi: mvm: add extended dwell time 2015-12-20 23:27:40 +02:00
fw-api-sta.h iwlwifi: mvm: support queue removal in ADD_STA hcmd 2016-05-10 22:14:44 +03:00
fw-api-stats.h
fw-api-tof.h
fw-api-tx.h iwlwifi: mvm: add support for new TX CMD API 2016-03-30 16:21:22 +03:00
fw-api.h iwlwifi: mvm: support p2p device frames tx on dqa queue #2 2016-05-10 18:34:25 +03:00
fw-dbg.c driver core update for 4.7-rc1 2016-05-20 21:26:15 -07:00
fw-dbg.h iwlwifi: mvm: constify the parameters of a few functions in fw-dbg.c 2016-01-07 19:01:32 +02:00
fw.c iwlwifi: mvm: remove redundant alloc_ctx parameter 2016-05-10 22:34:03 +03:00
led.c
mac80211.c iwlwifi: mvm: support dqa-mode agg on non-shared queue 2016-05-10 22:34:09 +03:00
mac-ctxt.c iwlwifi: mvm: support p2p device frames tx on dqa queue #2 2016-05-10 18:34:25 +03:00
Makefile iwlwifi: remove support for fw older than -16.ucode 2016-03-30 16:21:27 +03:00
mvm.h iwlwifi: mvm: support dqa-mode agg on non-shared queue 2016-05-10 22:34:09 +03:00
nvm.c iwlwifi: refactor the code that reads the MAC address from the NVM 2016-03-07 13:33:00 +02:00
offloading.c
ops.c iwlwifi: mvm: support dqa-mode agg on non-shared queue 2016-05-10 22:34:09 +03:00
phy-ctxt.c cfg80211: remove enum ieee80211_band 2016-04-12 15:56:15 +02:00
power.c iwlwifi: mvm: modify the max SP to infinite 2016-03-30 16:21:21 +03:00
quota.c iwlwifi: mvm: support setting minimum quota from debugfs 2016-02-01 16:40:23 +02:00
rs.c cfg80211: remove enum ieee80211_band 2016-04-12 15:56:15 +02:00
rs.h cfg80211: remove enum ieee80211_band 2016-04-12 15:56:15 +02:00
rx.c iwlwifi: mvm: add a new mvm reference type for RX data 2016-05-10 22:14:51 +03:00
rxmq.c iwlwifi: mvm: fix potential NULL-dereference in iwl_mvm_reorder() 2016-06-10 13:34:34 +03:00
scan.c iwlwifi: mvm: increase scan timeout to 20 seconds 2016-06-10 12:50:53 +03:00
sf.c iwlwifi: remove support for fw older than -16.ucode 2016-03-30 16:21:27 +03:00
sta.c iwlwifi: mvm: fix RCU splat in TKIP's update_key 2016-06-10 13:32:25 +03:00
sta.h iwlwifi: mvm: add reorder buffer per queue 2016-05-10 22:14:42 +03:00
tdls.c cfg80211: remove enum ieee80211_band 2016-04-12 15:56:15 +02:00
testmode.h
time-event.c iwlwifi: mvm: ROC: cleanup time event info on FW failure 2016-03-09 20:59:18 +02:00
time-event.h iwlwifi: mvm: extend time event duration 2016-03-07 13:34:16 +02:00
tof.c
tof.h
tt.c iwlwifi: mvm: use helpers to get iwl_mvm_sta 2016-05-10 22:34:04 +03:00
tx.c iwlwifi: mvm: support dqa-mode agg on non-shared queue 2016-05-10 22:34:09 +03:00
utils.c iwlwifi: mvm: support dqa-mode agg on non-shared queue 2016-05-10 22:34:09 +03:00