]> git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/commit
cfg80211: fix double-free after changing network namespace
authorStefan Bühler <source@stbuehler.de>
Tue, 26 Nov 2019 10:05:44 +0000 (11:05 +0100)
committerJohannes Berg <johannes.berg@intel.com>
Fri, 13 Dec 2019 09:08:09 +0000 (10:08 +0100)
commit56cb31e185adb61f930743a9b70e700a43625386
tree8fd77a423bf357821ccc773baa05770e2bcc07f2
parent753ffad3d6243303994227854d951ff5c70fa9e0
cfg80211: fix double-free after changing network namespace

If wdev->wext.keys was initialized it didn't get reset to NULL on
unregister (and it doesn't get set in cfg80211_init_wdev either), but
wdev is reused if unregister was triggered through
cfg80211_switch_netns.

The next unregister (for whatever reason) will try to free
wdev->wext.keys again.

Signed-off-by: Stefan Bühler <source@stbuehler.de>
Link: https://lore.kernel.org/r/20191126100543.782023-1-stefan.buehler@tik.uni-stuttgart.de
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/wireless/core.c