Miaoqing Pan 07246c1158 ath9k: fix an invalid pointer dereference in ath9k_rng_stop() ... The bug was triggered when do suspend/resuming continuously on Dell XPS L322X/0PJHXN version 9333 (2013) with kernel 4.12.0-041200rc4-generic. But can't reproduce on DELL E5440 + AR9300 PCIE chips. The warning is caused by accessing invalid pointer sc->rng_task. sc->rng_task is not be cleared after kthread_stop(sc->rng_task) be called in ath9k_rng_stop(). Because the kthread is stopped before ath9k_rng_kthread() be scheduled. So set sc->rng_task to null after kthread_stop(sc->rng_task) to resolve this issue. WARNING: CPU: 0 PID: 984 at linux/kernel/kthread.c:71 kthread_stop+0xf1/0x100 CPU: 0 PID: 984 Comm: NetworkManager Not tainted 4.12.0-041200rc4-generic #201706042031 Hardware name: Dell Inc. Dell System XPS L322X/0PJHXN, BIOS A09 05/15/2013 task: ffff950170fdda00 task.stack: ffffa22c01538000 RIP: 0010:kthread_stop+0xf1/0x100 RSP: 0018:ffffa22c0153b5b0 EFLAGS: 00010246 RAX: ffffffffa6257800 RBX: ffff950171b79560 RCX: 0000000000000000 RDX: 0000000080000000 RSI: 000000007fffffff RDI: ffff9500ac9a9680 RBP: ffffa22c0153b5c8 R08: 0000000000000000 R09: 0000000000000000 R10: ffffa22c0153b648 R11: ffff9501768004b8 R12: ffff9500ac9a9680 R13: ffff950171b79f70 R14: ffff950171b78780 R15: ffff9501749dc018 FS: 00007f0d6bfd5540(0000) GS:ffff95017f200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc190161a08 CR3: 0000000232906000 CR4: 00000000001406f0 Call Trace: ath9k_rng_stop+0x1a/0x20 [ath9k] ath9k_stop+0x3b/0x1d0 [ath9k] drv_stop+0x33/0xf0 [mac80211] ieee80211_stop_device+0x43/0x50 [mac80211] ieee80211_do_stop+0x4f2/0x810 [mac80211] Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=196043 Reported-by: Giulio Genovese <giulio.genovese@gmail.com> Tested-by: Giulio Genovese <giulio.genovese@gmail.com> Cc: <stable@vger.kernel.org> Signed-off-by: Miaoqing Pan <miaoqing@codeaurora.org> Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>		2017-06-28 19:54:33 +03:00
..
ahb.c	ath9k: constify ath_bus_ops structure	2016-12-01 13:17:45 +02:00
ani.c	scripts/spelling.txt: add "aligment" pattern and fix typo instances	2017-02-27 18:43:46 -08:00
ani.h
antenna.c
ar953x_initvals.h
ar955x_1p0_initvals.h
ar956x_initvals.h
ar5008_initvals.h
ar5008_phy.c	ath9k: replace eeprom_param EEP_MINOR_REV with get_eeprom_rev	2016-12-15 10:26:27 +02:00
ar9001_initvals.h
ar9002_calib.c
ar9002_hw.c	ath9k: replace eeprom_param EEP_MINOR_REV with get_eeprom_rev	2016-12-15 10:26:27 +02:00
ar9002_initvals.h
ar9002_mac.c	ath9k: ar9002_mac: kill off ACCESS_ONCE()	2017-01-12 12:59:45 +02:00
ar9002_phy.c	ath9k_hw: fix spectral scan on AR9285 and newer	2016-07-19 20:58:07 +03:00
ar9002_phy.h	ath9k_hw: fix spectral scan on AR9285 and newer	2016-07-19 20:58:07 +03:00
ar9003_2p2_initvals.h
ar9003_aic.c
ar9003_aic.h
ar9003_buffalo_initvals.h
ar9003_calib.c	Revert "ath9k_hw: implement temperature compensation support for AR9003+"	2016-10-13 14:11:30 +03:00
ar9003_eeprom.c	ath9k: Add an eeprom_ops callback for retrieving the eepmisc value	2016-12-15 10:26:22 +02:00
ar9003_eeprom.h	ath9k: use correct OTP register offsets for the AR9340 and AR9550	2017-02-15 11:20:43 +02:00
ar9003_hw.c
ar9003_mac.c	mac80211: properly remove RX_ENC_FLAG_40MHZ	2017-05-08 11:11:56 +02:00
ar9003_mac.h
ar9003_mci.c
ar9003_mci.h
ar9003_paprd.c
ar9003_phy.c	ath9k: fix tx99 bus error	2017-06-28 19:52:26 +03:00
ar9003_phy.h	ath9k_hw: fix duplicate (and partially wrong) definition of AR_CH0_THERM	2016-07-19 20:59:04 +03:00
ar9003_rtt.c
ar9003_rtt.h
ar9003_wow.c
ar9330_1p1_initvals.h
ar9330_1p2_initvals.h
ar9340_initvals.h
ar9462_2p0_initvals.h
ar9462_2p1_initvals.h
ar9485_initvals.h
ar9565_1p0_initvals.h
ar9565_1p1_initvals.h
ar9580_1p0_initvals.h
ath9k.h	ath9k: fix race condition in enabling/disabling IRQs	2017-02-07 11:00:25 +02:00
beacon.c	ath9k: Fix beacon configuration for addition/removal of interfaces	2016-07-08 17:03:41 +03:00
btcoex.c
btcoex.h
calib.c	ath9k: add noise floor override option	2017-04-19 17:08:27 +03:00
calib.h
channel.c	networking: introduce and use skb_put_data()	2017-06-16 11:48:37 -04:00
common-beacon.c
common-beacon.h
common-debug.c
common-debug.h	ath9k: move RELAY and DEBUG_FS to ATH9K[_HTC]_DEBUGFS	2017-01-13 15:29:24 +02:00
common-init.c
common-init.h
common-spectral.c	ath9k: don't trigger spectral scan when not enabled	2017-03-16 10:54:52 +02:00
common-spectral.h	ath9k: move RELAY and DEBUG_FS to ATH9K[_HTC]_DEBUGFS	2017-01-13 15:29:24 +02:00
common.c	Merge ath-next from git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/ath.git	2017-05-19 11:47:44 +03:00
common.h	ath9k: Fix beacon configuration for addition/removal of interfaces	2016-07-08 17:03:41 +03:00
debug_sta.c	mac80211: separate encoding/bandwidth from flags	2017-04-28 10:41:45 +02:00
debug.c	ath9k: add noise floor override option	2017-04-19 17:08:27 +03:00
debug.h	ath9k: Introduce airtime fairness scheduling between stations	2016-12-15 10:43:05 +02:00
dfs_debug.c
dfs_debug.h
dfs.c
dfs.h
dynack.c	ath9k: Remove some #defined constants to decrease verbosity	2016-07-08 17:03:37 +03:00
dynack.h
eeprom_4k.c	ath9k: move RELAY and DEBUG_FS to ATH9K[_HTC]_DEBUGFS	2017-01-13 15:29:24 +02:00
eeprom_9287.c	ath9k: move RELAY and DEBUG_FS to ATH9K[_HTC]_DEBUGFS	2017-01-13 15:29:24 +02:00
eeprom_def.c	ath9k: move RELAY and DEBUG_FS to ATH9K[_HTC]_DEBUGFS	2017-01-13 15:29:24 +02:00
eeprom.c	ath9k: remove unnecessary code	2017-05-19 10:57:55 +03:00
eeprom.h	ath9k: Add cast to u8 to FREQ2FBIN macro	2017-04-19 17:00:48 +03:00
gpio.c	ath9k: mark ath_fill_led_pin() static	2016-09-02 19:06:05 +03:00
hif_usb.c	networking: make skb_push & __skb_push return void pointers	2017-06-16 11:48:40 -04:00
hif_usb.h	ath9k_htc: don't use HZ for usb msg timeouts	2016-12-01 13:18:33 +02:00
htc_drv_beacon.c	ath9k: Remove some #defined constants to decrease verbosity	2016-07-08 17:03:37 +03:00
htc_drv_debug.c
htc_drv_gpio.c
htc_drv_init.c	wireless: Set NL80211_EXT_FEATURE_CQM_RSSI_LIST in multiple drivers	2017-03-06 09:21:39 +01:00
htc_drv_main.c
htc_drv_txrx.c	mac80211: separate encoding/bandwidth from flags	2017-04-28 10:41:45 +02:00
htc_hst.c	networking: make skb_push & __skb_push return void pointers	2017-06-16 11:48:40 -04:00
htc_hst.h
htc.h
hw-ops.h
hw.c	ath9k_hw: check if the chip failed to wake up	2017-02-07 11:00:21 +02:00
hw.h	ath9k: add noise floor override option	2017-04-19 17:08:27 +03:00
init.c	wireless: Set NL80211_EXT_FEATURE_CQM_RSSI_LIST in multiple drivers	2017-03-06 09:21:39 +01:00
Kconfig	ath9k: move RELAY and DEBUG_FS to ATH9K[_HTC]_DEBUGFS	2017-01-13 15:29:24 +02:00
link.c	ath9k: rename tx_complete_work to hw_check_work	2017-02-07 11:00:17 +02:00
mac.c	mac80211: properly remove RX_ENC_FLAG_40MHZ	2017-05-08 11:11:56 +02:00
mac.h	mac80211: separate encoding/bandwidth from flags	2017-04-28 10:41:45 +02:00
main.c	ath9k: fix race condition in enabling/disabling IRQs	2017-02-07 11:00:25 +02:00
Makefile	ath9k: move RELAY and DEBUG_FS to ATH9K[_HTC]_DEBUGFS	2017-01-13 15:29:24 +02:00
mci.c
mci.h
pci.c	ath9k: Add Dell Wireless 1601 with wowlan capability	2017-04-19 16:58:46 +03:00
phy.h
recv.c	mac80211: separate encoding/bandwidth from flags	2017-04-28 10:41:45 +02:00
reg_aic.h
reg_mci.h
reg_wow.h
reg.h
rng.c	ath9k: fix an invalid pointer dereference in ath9k_rng_stop()	2017-06-28 19:54:33 +03:00
tx99.c	ath9k: fix tx99 use after free	2017-06-28 19:52:21 +03:00
wmi.c	net: manual clean code which call skb_put_[data:zero]	2017-06-20 13:30:15 -04:00
wmi.h
wow.c
xmit.c	ath9k: clean up and fix ath_tx_count_airtime	2017-02-14 19:58:33 +02:00