wifi: iwlwifi: Clean dangling pointer in tx path

If iwl_txq_gen2_build_tfd fails, we return -1, which will cause calling
code to dispose of the skb one way or another.  Remove any reference to
that skb from the txq entries so that nothing will try to access it
later.

Signed-off-by: Ben Greear <greearb@candelatech.com>
Link: https://patch.msgid.link/20260214190509.2098565-1-greearb@candelatech.com
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
This commit is contained in:
Ben Greear 2026-02-14 11:05:09 -08:00 committed by Miri Korenblit
parent ac798f757d
commit 0ba1b36618

View File

@ -773,6 +773,8 @@ int iwl_txq_gen2_tx(struct iwl_trans *trans, struct sk_buff *skb,
tfd = iwl_txq_gen2_build_tfd(trans, txq, dev_cmd, skb, out_meta);
if (!tfd) {
txq->entries[idx].skb = NULL;
txq->entries[idx].cmd = NULL;
spin_unlock(&txq->lock);
return -1;
}