Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f9bef3df authored Jun 19, 2013 by Ben Greear Committed by Johannes Berg Jun 24, 2013

wireless: check for dangling wdev->current_bss pointer



If it *is* still set when the netdev is being deleted,
then we are about to leak a pointer.  Warn and clean up
in that case.

Signed-off-by: Ben Greear <greearb@candelatech.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>

parent 0e3a39b5

net/wireless/core.c

+6 −0

Original line number	Diff line number	Diff line
		@@ -934,6 +934,12 @@ static int cfg80211_netdev_notifier_call(struct notifier_block *nb,
		* freed.
		*/
		cfg80211_process_wdev_events(wdev);

		if (WARN_ON(wdev->current_bss)) {
		cfg80211_unhold_bss(wdev->current_bss);
		cfg80211_put_bss(wdev->wiphy, &wdev->current_bss->pub);
		wdev->current_bss = NULL;
		}
		break;
		case NETDEV_PRE_UP:
		if (!(wdev->wiphy->interface_modes & BIT(wdev->iftype)))