[lvc-project] [PATCH 5.10 1/1] wifi: rtl8xxxu: Fix the error handling of the probe function

Fedor Pchelkin pchelkin at ispras.ru
Mon Oct 21 18:01:24 MSK 2024


On Fri, 18. Oct 13:32, Daniil Dulov wrote:
> From: Zheyu Ma <zheyuma97 at gmail.com>
> 
> commit 13876f2a087ad352bf640a7a0a4a4229ea6e9e4f upstream.
> 
> When the driver fails at ieee80211_alloc_hw() at the probe time, the
> driver will free the 'hw' which is not allocated, causing a bug.
> 
> The following log can reveal it:
> 
> [   15.981294] BUG: KASAN: user-memory-access in mutex_is_locked+0xe/0x40
> [   15.981558] Read of size 8 at addr 0000000000001ab0 by task modprobe/373
> [   15.982583] Call Trace:
> [   15.984282]  ieee80211_free_hw+0x22/0x390
> [   15.984446]  rtl8xxxu_probe+0x3a1/0xab30 [rtl8xxxu]
> 
> Fix the bug by changing the order of the error handling.
> 
> Signed-off-by: Zheyu Ma <zheyuma97 at gmail.com>
> Signed-off-by: Kalle Valo <kvalo at kernel.org>
> Link: https://lore.kernel.org/r/20220716130444.2950690-1-zheyuma97@gmail.com
> Signed-off-by: Daniil Dulov <d.dulov at aladdin.ru>

Добавлено в LVC-5.10. Спасибо!



More information about the lvc-project mailing list