During rmnet unregistration, the real device rx_handler is first cleared
followed by the removal of rx_handler_data after the rcu synchronization.
Any packets in the receive path may observe that the rx_handler is NULL.
However, there is no check when dereferencing this value to use the
rmnet_port information.
This fixes following splat by adding the NULL check.
Unable to handle kernel NULL pointer dereference at virtual
address 000000000000000d
pc : rmnet_rx_handler+0x124/0x284
lr : rmnet_rx_handler+0x124/0x284
rmnet_rx_handler+0x124/0x284
__netif_receive_skb_core+0x758/0xd74
__netif_receive_skb+0x50/0x17c
process_backlog+0x15c/0x1b8
napi_poll+0x88/0x284
net_rx_action+0xbc/0x23c
__do_softirq+0x20c/0x48c
Fixes:
|
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
rmnet_config.c | ||
rmnet_config.h | ||
rmnet_handlers.c | ||
rmnet_handlers.h | ||
rmnet_map.h | ||
rmnet_map_command.c | ||
rmnet_map_data.c | ||
rmnet_private.h | ||
rmnet_vnd.c | ||
rmnet_vnd.h |