Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 393b9b0f authored by Govind Singh's avatar Govind Singh Committed by Kalle Valo
Browse files

ath10k: disable napi before resource cleanup to avoid "use after free" 



CE buffers are cleaned up prior to napi disable and this is causing
NULL pointer dereference due to "use after free".

Disable napi before resource cleanup to avoid "use after free".

Signed-off-by: default avatarGovind Singh <govinds@codeaurora.org>
Signed-off-by: default avatarKalle Valo <kvalo@codeaurora.org>
parent 752ed2a2

drivers/net/wireless/ath/ath10k/snoc.c

+1 −1
Original line number Diff line number Diff line
@@ -731,9 +731,9 @@ static void ath10k_snoc_buffer_cleanup(struct ath10k *ar) 
static void ath10k_snoc_hif_stop(struct ath10k *ar)

{

	ath10k_snoc_irq_disable(ar);

	ath10k_snoc_buffer_cleanup(ar);

	napi_synchronize(&ar->napi);

	napi_disable(&ar->napi);

	ath10k_snoc_buffer_cleanup(ar);

	ath10k_dbg(ar, ATH10K_DBG_BOOT, "boot hif stop\n");

}