1
0
Fork 0
mirror of synced 2025-03-06 20:59:54 +01:00
linux/drivers/net/wireless/intel/iwlwifi
Jia-Ju Bai a8627176b0 iwlwifi: Fix double-free problems in iwl_req_fw_callback()
In the error handling code of iwl_req_fw_callback(), iwl_dealloc_ucode()
is called to free data. In iwl_drv_stop(), iwl_dealloc_ucode() is called
again, which can cause double-free problems.

To fix this bug, the call to iwl_dealloc_ucode() in
iwl_req_fw_callback() is deleted.

This bug is found by a runtime fuzzing tool named FIZZER written by us.

Signed-off-by: Jia-Ju Bai <baijiaju1990@gmail.com>
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
2019-06-01 08:04:50 +03:00
..
cfg wireless-drivers-next patches for 5.2 2019-05-05 10:20:53 -07:00
dvm iwlwifi: dvm: no need to check return value of debugfs_create functions 2019-02-20 20:47:56 +02:00
fw iwlwifi: print fseq info upon fw assert 2019-06-01 08:04:48 +03:00
mvm iwlwifi: print fseq info upon fw assert 2019-06-01 08:04:48 +03:00
pcie iwlwifi: fix AX201 killer sku loading firmware issue 2019-06-01 08:04:49 +03:00
iwl-agn-hw.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-config.h iwlwifi: remove unused 0x40C0 PCI device IDs 2019-04-19 10:27:29 +03:00
iwl-context-info-gen3.h iwlwifi: update gen3 interrupts - sw error and image response 2018-07-26 13:16:16 +03:00
iwl-context-info.h iwlwifi: pcie: set RB size according to user settings 2018-09-28 08:57:27 +03:00
iwl-csr.h iwlwifi: dbg: replace dump info device family with HW type 2019-04-29 18:42:47 +03:00
iwl-dbg-tlv.c wireless-drivers-next patches for 5.2 2019-05-05 10:20:53 -07:00
iwl-dbg-tlv.h iwlwifi: trans: support loading ini TLVs from external file 2018-11-23 13:01:06 +02:00
iwl-debug.c iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-debug.h iwlwifi: add FW_INFO debug level 2019-04-19 10:26:22 +03:00
iwl-devtrace-data.h iwlwifi: trace: change trace to trace one TB at a time 2018-10-08 10:35:27 +03:00
iwl-devtrace-io.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-devtrace-iwlwifi.h iwlwifi: remove ucode error tracepoint 2018-09-28 08:57:22 +03:00
iwl-devtrace-msg.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-devtrace-ucode.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-devtrace.c iwlwifi: remove ucode error tracepoint 2018-09-28 08:57:22 +03:00
iwl-devtrace.h iwlwifi: add 80211 hdr offset to trace data 2018-08-31 11:38:29 +03:00
iwl-drv.c iwlwifi: Fix double-free problems in iwl_req_fw_callback() 2019-06-01 08:04:50 +03:00
iwl-drv.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-eeprom-parse.c iwlwifi: eeprom-parse: use struct_size() in kzalloc() 2019-02-20 20:47:54 +02:00
iwl-eeprom-parse.h iwlwifi: move iwl_nvm_check_version() into dvm 2018-12-14 13:04:46 +02:00
iwl-eeprom-read.c iwlwifi: refactor NIC init sequence 2019-02-04 12:28:09 +02:00
iwl-eeprom-read.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-fh.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-io.c iwlwifi: add force NMI for AX210 devices 2019-02-14 11:29:48 +02:00
iwl-io.h iwlwifi: align to new periphery address space for AX210 family 2019-02-14 11:29:48 +02:00
iwl-modparams.h iwlwifi: move iwl_enable_{rx,tx}_ampdu to iwl-modparams.h 2019-01-29 16:10:30 +02:00
iwl-nvm-parse.c iwlwifi: Use correct channel_profile iniwl_get_nvm 2019-04-29 18:42:44 +03:00
iwl-nvm-parse.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-op-mode.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-phy-db.c iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-phy-db.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-prph.h iwlwifi: print fseq info upon fw assert 2019-06-01 08:04:48 +03:00
iwl-scd.h iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-trans.c iwlwifi: remove all occurrences of the FSF address paragraph 2018-08-31 11:38:33 +03:00
iwl-trans.h wireless-drivers-next patches for 5.2 2019-04-18 11:07:55 -07:00
Kconfig treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00
Makefile iwlwifi: trans: parse and store debug ini TLVs 2018-11-23 13:01:06 +02:00