Home - Waterfall Grid T-Grid Console Builders Recent Builds Buildslaves Changesources - JSON API - About

Change #1008

Category None
Changed by Rafał Miłecki <rafalohnoyoudont@milecki.pl>
Changed at Tue 08 Jan 2019 10:46:24
Repository git@git.lede-project.org:source.git
Branch lede-17.01
Revision 9d4eed6837c014380d16ec6824b643d25731b927

Comments

mac80211: brcmfmac: fix use-after-free & possible NULL pointer dereference
1) Using fwctx variable after brcmf_fw_request_done() was executed meant
   accessing freed memory.
2) Using fwctx->completion for the wait_for_completion_timeout() call
   could reuslt in NULL pointer dereference on fw loading error or if
   brcmf_fw_request_done() was executed quickly enough.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
(cherry picked from commit 529c95cc15dc9fcc7709400cc921f2a3c03cd263)

Changed files