diff options
| author | Aniket Nagarnaik <aniketn@marvell.com> | 2015-09-18 06:32:09 -0700 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2015-12-09 14:34:25 -0500 |
| commit | a251acf26f718499da7db0aa8b73ee671c749028 (patch) | |
| tree | ec3662cf1771be32edd39102f8326535c31f03c6 | |
| parent | 8cb5ad246f79e4703e010e0d0e0211fb95576401 (diff) | |
| download | lwn-a251acf26f718499da7db0aa8b73ee671c749028.tar.gz lwn-a251acf26f718499da7db0aa8b73ee671c749028.zip | |
mwifiex: fix NULL pointer dereference during hidden SSID scan
commit 17e524b1b60f4390d24a51d9524d1648cf5d1447 upstream.
This NULL pointer dereference is observed during suspend resume
stress test. All pending commands are cancelled when system goes
into suspend state. There a corner case in which host may receive
response for last scan command after this and try to trigger extra
active scan for hidden SSIDs.
The issue is fixed by adding a NULL check to skip that extra scan.
Fixes: 2375fa2b36feaf34 (mwifiex: fix unable to connect hidden SSID..)
Signed-off-by: Aniket Nagarnaik <aniketn@marvell.com>
Signed-off-by: Amitkumar Karwar <akarwar@marvell.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| -rw-r--r-- | drivers/net/wireless/mwifiex/scan.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/net/wireless/mwifiex/scan.c b/drivers/net/wireless/mwifiex/scan.c index 5847863a2d6b..278ec477fd90 100644 --- a/drivers/net/wireless/mwifiex/scan.c +++ b/drivers/net/wireless/mwifiex/scan.c @@ -1889,7 +1889,7 @@ mwifiex_active_scan_req_for_passive_chan(struct mwifiex_private *priv) u8 id = 0; struct mwifiex_user_scan_cfg *user_scan_cfg; - if (adapter->active_scan_triggered) { + if (adapter->active_scan_triggered || !priv->scan_request) { adapter->active_scan_triggered = false; return 0; } |