RE: [EXT] [PATCH] mwifiex: Fix memory corruption in dump_station
From: Ganapathi Bhat <hidden>
Date: 2020-05-16 08:07:23
Also in:
linux-wireless, lkml
From: Ganapathi Bhat <hidden>
Date: 2020-05-16 08:07:23
Also in:
linux-wireless, lkml
Hi Pali,
The mwifiex_cfg80211_dump_station() uses static variable for iterating over
a linked list of all associated stations (when the driver is in UAP role). This has
a race condition if .dump_station is called in parallel for multiple interfaces.
This corruption can be triggered by registering multiple SSIDs and calling, in
parallel for multiple interfaces
iw dev <iface> station dumpThanks for this change. Acked-by: Ganapathi Bhat <redacted> Regards, Ganapathi