diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2022-02-03 11:25:32 +0300 |
|---|---|---|
| committer | Kalle Valo <kvalo@kernel.org> | 2022-02-10 10:32:25 +0200 |
| commit | a954f29aea5d2cf58feedf83235edf3367229a37 (patch) | |
| tree | 792c10a63f92cedb8cafdf3ea4bbf056e92c7cd5 /drivers/net/wireless/realtek/rtw89/fw.c | |
| parent | c761161851d31a6dc5274699cdf4e01de558cba9 (diff) | |
rtw88: fix use after free in rtw_hw_scan_update_probe_req()
This code needs to use skb_queue_walk_safe() instead of skb_queue_walk()
because it frees the list iterator.
Fixes: d95984b5580d ("rtw88: fix memory overrun and memory leak during hw_scan")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Ping-Ke Shih <pkshih@realtek.com>
Signed-off-by: Kalle Valo <kvalo@kernel.org>
Link: https://lore.kernel.org/r/20220203082532.GA25151@kili
Diffstat (limited to 'drivers/net/wireless/realtek/rtw89/fw.c')
0 files changed, 0 insertions, 0 deletions