linux/drivers/net/wireless/mediatek
Felix Fietkau ac6724d49f mt76: clear skb pointers from rx aggregation reorder buffer during cleanup
[ Upstream commit 9379df2fd9 ]

During the cleanup of the aggregation session, a rx handler (or release timer)
on another CPU might still hold a pointer to the reorder buffer and could
attempt to release some packets.
Clearing pointers during cleanup avoids a theoretical use-after-free bug here.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-10-01 13:14:33 +02:00
..
mt76 mt76: clear skb pointers from rx aggregation reorder buffer during cleanup 2020-10-01 13:14:33 +02:00
mt7601u mt7601u: fix bbp version check in mt7601u_wait_bbp_ready 2020-01-27 14:49:52 +01:00
Kconfig net/wireless: fix spaces and grammar copy/paste in vendor Kconfig help text 2018-03-13 18:52:25 +02:00
Makefile mt76: add driver code for MT76x2e 2017-12-07 15:35:56 +02:00