linux_dsm_epyc7002/drivers/net/wireless
Alexey Khoroshilov a31267c308 rtl8187: fix use after free on failure path in rtl8187_probe()
If allocation of io_dmabuf fails, rtl8187_probe() calls usb_put_dev(udev)
while usb_get_dev(udev) is not called yet. As a result refcnt is decremented
incorrectly and usb_dev can be used after memory deallocation.

Found by Linux Driver Verification project (linuxtesting.org).

Signed-off-by: Alexey Khoroshilov <khoroshilov@ispras.ru>
Acked-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2014-03-31 13:47:41 -04:00
..
ath carl9170: Remove casts of pointer to same type 2014-03-27 14:20:05 -04:00
b43 net: Replace min macro with min_t 2014-03-03 15:35:54 -05:00
b43legacy net: Replace min macro with min_t 2014-03-03 15:35:54 -05:00
brcm80211 brcmfmac: use mfp if required from user-space 2014-03-27 14:20:06 -04:00
cw1200 net: Replace min macro with min_t 2014-03-03 15:35:54 -05:00
hostap Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless 2014-03-04 13:05:12 -05:00
ipw2x00 net: Replace min macro with min_t 2014-03-03 15:35:54 -05:00
iwlegacy iwl4965: disable 8K A-MSDU by default 2014-03-04 13:28:36 -05:00
iwlwifi Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next 2014-03-19 15:14:07 -04:00
libertas Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless 2014-03-04 13:05:12 -05:00
libertas_tf
mwifiex mwifiex: fix spinlock bad magic bug 2014-03-31 13:47:41 -04:00
orinoco orinoco: replace function ieee80211_{dsss_chan_to_freq, freq_to_dsss_chan} 2014-02-28 14:12:36 -05:00
p54 p54usb: fix leaks at failure path in p54u_probe() 2014-03-14 14:49:13 -04:00
prism54 net: Replace min macro with min_t 2014-03-03 15:35:54 -05:00
rsi rsi: rsi_91x: misleading debug printk 2014-03-31 13:47:41 -04:00
rt2x00 net: Replace min macro with min_t 2014-03-03 15:35:54 -05:00
rtl818x rtl8187: fix use after free on failure path in rtl8187_probe() 2014-03-31 13:47:41 -04:00
rtlwifi rtlwifi: rtl8188ee: enable MSI interrupts mode 2014-03-31 13:47:41 -04:00
ti Drivers:net:wireless:ti:wl1251: Fixed Sparse invalid assignment warning 2014-03-04 13:28:36 -05:00
zd1211rw
adm8211.c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into for-davem 2014-01-17 14:43:17 -05:00
adm8211.h
airo_cs.c
airo.c airo: replace function ieee80211_{dsss_chan_to_freq, freq_to_dsss_chan} 2014-02-28 14:11:13 -05:00
airo.h
at76c50x-usb.c
at76c50x-usb.h
atmel_cs.c
atmel_pci.c
atmel.c atmel: replace function ieee80211_{dsss_chan_to_freq, freq_to_dsss_chan} 2014-02-28 14:11:13 -05:00
atmel.h
Kconfig rsi: Add RS9113 wireless driver 2014-03-17 13:51:52 -04:00
mac80211_hwsim.c mac80211_hwsim: allow creation of single-channel radios with chanctx 2014-02-11 13:10:02 +01:00
mac80211_hwsim.h mac80211_hwsim: allow creation of single-channel radios with chanctx 2014-02-11 13:10:02 +01:00
Makefile rsi: Add RS9113 wireless driver 2014-03-17 13:51:52 -04:00
mwl8k.c mwl8k: mwl8k_update_survey can be static 2014-03-06 14:29:58 -05:00
ray_cs.c
ray_cs.h
rayctl.h
rndis_wlan.c rndis_wlan: replace function ieee80211_{dsss_chan_to_freq, freq_to_dsss_chan} 2014-02-28 14:12:36 -05:00
wl3501_cs.c wl3501_cs: replace function ieee80211_{dsss_chan_to_freq, freq_to_dsss_chan} 2014-02-28 14:12:36 -05:00
wl3501.h
zd1201.c zd1201: replace function ieee80211_{dsss_chan_to_freq, freq_to_dsss_chan} 2014-02-28 14:12:36 -05:00
zd1201.h