Miaoqing Pan ea6d8d6700 ath9k: fix NULL pointer dereference ... commit 40bea976c7 upstream. relay_open() may return NULL, check the return value to avoid the crash. BUG: unable to handle kernel NULL pointer dereference at 0000000000000040 IP: [<ffffffffa01a95c5>] ath_cmn_process_fft+0xd5/0x700 [ath9k_common] PGD 41cf28067 PUD 41be92067 PMD 0 Oops: 0000 [#1] SMP CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.8.6+ #35 Hardware name: Hewlett-Packard h8-1080t/2A86, BIOS 6.15 07/04/2011 task: ffffffff81e0c4c0 task.stack: ffffffff81e00000 RIP: 0010:[<ffffffffa01a95c5>] [<ffffffffa01a95c5>] ath_cmn_process_fft+0xd5/0x700 [ath9k_common] RSP: 0018:ffff88041f203ca0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 000000000000059f RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffffffff81f0ca98 RBP: ffff88041f203dc8 R08: ffffffffffffffff R09: 00000000000000ff R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffffffff81f0ca98 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff88041f200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000040 CR3: 000000041b6ec000 CR4: 00000000000006f0 Stack: 0000000000000363 00000000000003f3 00000000000003f3 00000000000001f9 000000000000049a 0000000001252c04 ffff88041f203e44 ffff880417b4bfd0 0000000000000008 ffff88041785b9c0 0000000000000002 ffff88041613dc60 Call Trace: <IRQ> [<ffffffffa01b6441>] ath9k_tasklet+0x1b1/0x220 [ath9k] [<ffffffff8105d8dd>] tasklet_action+0x4d/0xf0 [<ffffffff8105dde2>] __do_softirq+0x92/0x2a0 Reported-by: Devin Tuchsen <devin.tuchsen@gmail.com> Tested-by: Devin Tuchsen <devin.tuchsen@gmail.com> Signed-off-by: Miaoqing Pan <miaoqing@codeaurora.org> Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-04-21 09:30:07 +02:00
..
appletalk
arcnet	arcnet/com20020: add LEDS_CLASS dependency	2015-11-03 11:29:56 -05:00
bonding	bonding: Fix bonding crash	2016-09-30 10:18:36 +02:00
caif	net: caif: check return value of alloc_netdev	2015-11-09 11:31:13 -05:00
can	can: usb_8dev: Fix memory leak of priv->cmd_msg_buffer	2017-03-12 06:37:28 +01:00
cris
dsa	net: dsa: bcm_sf2: Ensure we re-negotiate EEE during after link change	2016-12-10 19:07:23 +01:00
ethernet	ibmveth: set correct gso_size and gso_type	2017-04-18 07:14:38 +02:00
fddi
fjes	fjes: fix inconsistent indenting	2015-11-15 17:09:23 -05:00
hamradio	mkiss: fix scribble on freed memory	2016-01-06 15:06:27 -05:00
hippi
hyperv	hv_netvsc: use skb_get_hash() instead of a homegrown implementation	2017-03-26 12:13:18 +02:00
ieee802154	fakelb: fix schedule while atomic	2017-03-15 09:57:15 +08:00
ipvlan	ipvlan: fix use after free of skb	2015-11-17 14:39:29 -05:00
irda	net: irda: Fix use-after-free in irtty_open()	2016-04-12 09:08:49 -07:00
phy	net: phy: bcm63xx: Utilize correct config_intr function	2017-02-04 09:45:09 +01:00
plip
ppp	ppp: defer netns reference release for ppp channel	2017-01-06 11:16:17 +01:00
slip	ppp, slip: Validate VJ compression slot parameters completely	2015-11-02 16:25:00 -05:00
team	team: don't call netdev_change_features under team->lock	2016-06-24 10:18:17 -07:00
usb	qmi_wwan/cdc_ether: add device ID for HP lt2523 (Novatel E371) WWAN card	2017-02-04 09:45:09 +01:00
vmxnet3	Driver: Vmxnet3: Fix regression caused by 5738a09	2016-01-06 16:20:13 -05:00
wan	farsync: fix off-by-one bug in fst_add_one	2016-04-20 15:42:03 +09:00
wimax
wireless	ath9k: fix NULL pointer dereference	2017-04-21 09:30:07 +02:00
xen-netback	xen: bug fixes for 4.4-rc5	2015-12-18 12:24:52 -08:00
dummy.c	net: dummy: add more features	2015-10-21 19:36:10 -07:00
eql.c
geneve.c	geneve: avoid use-after-free of skb->data	2016-12-10 19:07:24 +01:00
ifb.c
Kconfig
LICENSE.SRC
loopback.c	net: introduce device min_header_len	2017-02-18 16:39:27 +01:00
macvlan.c	macvlan: fix leak in macvlan_handle_frame	2015-11-17 14:39:29 -05:00
macvtap.c	macvtap: read vnet_hdr_size once	2017-02-18 16:39:27 +01:00
Makefile
mdio.c
mii.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c	rapidio/rionet: fix deadlock on SMP	2016-04-12 09:08:58 -07:00
sb1000.c
Space.c
sungem_phy.c
tun.c	tun: read vnet_hdr_sz once	2017-02-18 16:39:27 +01:00
veth.c	veth: don’t modify ip_summed; doing so treats packets with bad checksums as good.	2015-12-22 15:15:34 -05:00
virtio_net.c	virtio-net: add a missing synchronize_net()	2016-12-10 19:07:22 +01:00
vrf.c	vrf: Fix use-after-free in vrf_xmit	2017-03-22 12:04:16 +01:00
vxlan.c	vxlan: correctly validate VXLAN ID against VXLAN_N_VID	2017-03-22 12:04:13 +01:00
xen-netfront.c	xen-netfront: Delete rx_refill_timer in xennet_disconnect_backend()	2017-02-14 15:22:52 -08:00