Commit de3584bd authored Nov 21, 2011 by Johannes Berg Committed by John W. Linville Nov 21, 2011

cfg80211: fix regulatory NULL dereference



By the time userspace returns with a response to
the regulatory domain request, the wiphy causing
the request might have gone away. If this is so,
reject the update but mark the request as having
been processed anyway.

Cc: Luis R. Rodriguez <lrodriguez@qca.qualcomm.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Cc: stable@vger.kernel.org
Signed-off-by: John W. Linville <linville@tuxdriver.com>

parent 9c8f2c42

net/wireless/reg.c

+4 −0

Original line number	Original line	Diff line number	Diff line
	@@ -2035,6 +2035,10 @@ static int __set_regdom(const struct ieee80211_regdomain *rd)
	}		}

	request_wiphy = wiphy_idx_to_wiphy(last_request->wiphy_idx);		request_wiphy = wiphy_idx_to_wiphy(last_request->wiphy_idx);
			if (!request_wiphy) {
			reg_set_request_processed();
			return -ENODEV;
			}

	if (!last_request->intersect) {		if (!last_request->intersect) {
	int r;		int r;