1
0
Fork 0
mirror of synced 2025-03-06 20:59:54 +01:00
linux/drivers/net/wireless/mediatek/mt76
Lorenzo Bianconi 191587cd1a mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi
Fix pointer overwrite in mt7921s_tx_prepare_skb and
mt7663_usb_sdio_tx_prepare_skb routines since in
commit '2a9e9857473b ("mt76: fix possible pktid leak")
mt76_tx_status_skb_add() has been moved out of
mt7921s_write_txwi()/mt7663_usb_sdio_write_txwi() overwriting
hw key pointer in ieee80211_tx_info structure. Fix the issue saving
key pointer before running mt76_tx_status_skb_add().

Fixes: 2a9e985747 ("mt76: fix possible pktid leak")
Tested-by: Deren Wu <deren.wu@mediatek.com>
Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Link: https://lore.kernel.org/r/eba40c84b6d114f618e2ae486cc6d0f2e9272cf9.1638193069.git.lorenzo@kernel.org
2021-11-29 19:33:33 +02:00
..
mt76x0 mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset 2021-10-20 10:37:01 +02:00
mt76x2 mt76: disable BH around napi_schedule() calls 2021-10-20 10:36:39 +02:00
mt7603 mt76: remove mt76_wcid pointer from mt76_tx_status_check signature 2021-10-20 10:36:47 +02:00
mt7615 mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi 2021-11-29 19:33:33 +02:00
mt7915 mt76: fix possible pktid leak 2021-11-24 19:21:50 +02:00
mt7921 mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi 2021-11-29 19:33:33 +02:00
agg-rx.c mt76: report Rx timestamp 2021-04-12 23:07:24 +02:00
debugfs.c mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature 2021-10-20 10:36:54 +02:00
dma.c mt76: dma: use ieee80211_tx_status_ext to free packets when tx fails 2021-06-17 18:33:53 +02:00
dma.h mt76: dma: add the capability to define a custom rx napi poll routine 2021-04-21 20:55:52 +02:00
eeprom.c mt76: Print error message when reading EEPROM from mtd failed 2021-10-23 13:23:45 +02:00
Kconfig mt76: mt7921: introduce mt7921e support 2021-01-29 18:09:57 +01:00
mac80211.c mt76: move mt76_ethtool_worker_info in mt76 module 2021-10-20 10:37:01 +02:00
Makefile mt76: sdio: move common code in mt76_sdio module 2021-10-20 10:36:58 +02:00
mcu.c mt76: drop MCU header size from buffer size in __mt76_mcu_send_firmware 2021-10-20 10:36:49 +02:00
mmio.c mt76: mt7615: rework IRQ handling to prepare for MSI support 2020-05-12 19:52:31 +02:00
mt76.h mt76: move mt76_ethtool_worker_info in mt76 module 2021-10-20 10:37:01 +02:00
mt76_connac.h mt76: mt7921: Add mt7922 support 2021-10-20 10:36:30 +02:00
mt76_connac_mac.c mt76: mt7663s: enable runtime-pm 2021-06-19 09:22:51 +02:00
mt76_connac_mcu.c mt76: connac: fix unresolved symbols when CONFIG_PM is unset 2021-10-23 13:23:45 +02:00
mt76_connac_mcu.h mt76: mt7615: apply cached RF data for DBDC 2021-10-23 13:23:44 +02:00
mt76x02.h mt76: move chainmask in mt76_phy 2021-01-26 20:07:48 +01:00
mt76x02_beacon.c mt76: mt76x02: minor mt76x02_mac_set_beacon optimization 2020-02-14 10:06:02 +01:00
mt76x02_debugfs.c mt76: Convert to DEFINE_SHOW_ATTRIBUTE 2020-09-24 18:10:20 +02:00
mt76x02_dfs.c wireless: mt76: convert tasklets to use new tasklet_setup() API 2020-12-04 13:46:16 +01:00
mt76x02_dfs.h mt76: switch to SPDX tag instead of verbose boilerplate text 2019-09-05 17:42:31 +02:00
mt76x02_dma.h mt76: convert from tx tasklet to tx worker thread 2020-09-24 18:10:18 +02:00
mt76x02_eeprom.c mt76: move band capabilities in mt76_phy 2020-12-04 14:31:15 +01:00
mt76x02_eeprom.h mt76: switch to SPDX tag instead of verbose boilerplate text 2019-09-05 17:42:31 +02:00
mt76x02_mac.c mt76: remove mt76_wcid pointer from mt76_tx_status_check signature 2021-10-20 10:36:47 +02:00
mt76x02_mac.h mt76: make mt76_update_survey() per phy 2021-06-19 09:22:49 +02:00
mt76x02_mcu.c mt76: improve mcu error logging 2021-04-21 11:42:22 +02:00
mt76x02_mcu.h mt76: implement .mcu_parse_response in struct mt76_mcu_ops 2020-12-04 13:46:14 +01:00
mt76x02_mmio.c mt76: remove mt76_wcid pointer from mt76_tx_status_check signature 2021-10-20 10:36:47 +02:00
mt76x02_phy.c mt76: move chainmask in mt76_phy 2021-01-26 20:07:48 +01:00
mt76x02_phy.h mt76: move channel state to struct mt76_phy 2020-02-14 10:03:08 +01:00
mt76x02_regs.h mt76: fix iv and CCMP header insertion 2021-06-19 09:22:51 +02:00
mt76x02_trace.c mt76: switch to SPDX tag instead of verbose boilerplate text 2019-09-05 17:42:31 +02:00
mt76x02_trace.h mt76: move mac_txdone tracepoint in mt76 module 2020-02-14 10:06:03 +01:00
mt76x02_txrx.c mt76: Introduce mt76_mcu data structure 2020-02-14 10:17:46 +01:00
mt76x02_usb.h mt76: remove qid argument to drv->tx_complete_skb 2020-09-24 18:10:17 +02:00
mt76x02_usb_core.c mt76: fix possible pktid leak 2021-11-24 19:21:50 +02:00
mt76x02_usb_mcu.c mt76: implement .mcu_parse_response in struct mt76_mcu_ops 2020-12-04 13:46:14 +01:00
mt76x02_util.c mt76: introduce packet_id idr 2021-10-20 10:36:47 +02:00
pci.c mt76: fix include in pci.h 2020-07-21 19:01:14 +02:00
sdio.c mt76: sdio: extend sdio module to support CONNAC2 2021-10-20 10:36:59 +02:00
sdio.h mt76: sdio: extend sdio module to support CONNAC2 2021-10-20 10:36:59 +02:00
sdio_txrx.c mt76: mt7921s: add reset support 2021-10-20 10:37:00 +02:00
testmode.c mt76: mt7921: introduce testmode support 2021-10-20 10:36:28 +02:00
testmode.h mt76: mt7921: introduce testmode support 2021-10-20 10:36:28 +02:00
trace.c mt76: move mac_txdone tracepoint in mt76 module 2020-02-14 10:06:03 +01:00
trace.h mt76: move mac_txdone tracepoint in mt76 module 2020-02-14 10:06:03 +01:00
tx.c mt76: fix timestamp check in tx_status 2021-11-24 19:21:02 +02:00
usb.c mt76: remove mt76_wcid pointer from mt76_tx_status_check signature 2021-10-20 10:36:47 +02:00
usb_trace.c mt76: switch to SPDX tag instead of verbose boilerplate text 2019-09-05 17:42:31 +02:00
usb_trace.h mt76: fix some checkpatch warnings 2019-09-05 17:42:32 +02:00
util.c mt76: add utility functions for deferring work to a kernel thread 2020-09-24 18:10:18 +02:00
util.h mt76: Make use of the helper macro kthread_run() 2021-10-23 13:23:45 +02:00