Avraham Stern cc4255eff5 iwlwifi: mvm: avoid use after free for pmsr request ... When a FTM request is aborted, the driver sends the abort command to the fw and waits for a response. When the response arrives, the driver calls cfg80211_pmsr_complete() for that request. However, cfg80211 frees the requested data immediately after sending the abort command, so this may lead to use after free. Fix it by clearing the request data in the driver when the abort command arrives and ignoring the fw notification that will come afterwards. Signed-off-by: Avraham Stern <avraham.stern@intel.com> Fixes: fc36ffda32 ("iwlwifi: mvm: support FTM initiator") Signed-off-by: Luca Coelho <luciano.coelho@intel.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org>		2020-02-03 20:09:11 +02:00
..
ipw2x00	wireless-drivers-next patches for v5.6	2019-12-20 21:55:00 -08:00
iwlegacy	iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop	2020-01-26 17:51:47 +02:00
iwlwifi	iwlwifi: mvm: avoid use after free for pmsr request	2020-02-03 20:09:11 +02:00
Kconfig	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
Makefile	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00