Re: [PATCH] 4.9.13 brcmfmac: fix use-after-free on resume

2017-03-13 Thread Arend Van Spriel
On 13-3-2017 10:33, Arend Van Spriel wrote: > On 6-3-2017 15:50, Daniel J Blueman wrote: >> On 6 March 2017 at 21:00, Arend Van Spriel >> wrote: >>> + linux-wireless >>> >>> On 6-3-2017 8:14, Daniel J Blueman wrote: KASAN reported 'struct wireless_dev wdev' was read after being freed. F

Re: [PATCH] 4.9.13 brcmfmac: fix use-after-free on resume

2017-03-13 Thread Arend Van Spriel
On 6-3-2017 15:50, Daniel J Blueman wrote: > On 6 March 2017 at 21:00, Arend Van Spriel > wrote: >> + linux-wireless >> >> On 6-3-2017 8:14, Daniel J Blueman wrote: >>> KASAN reported 'struct wireless_dev wdev' was read after being freed. >>> Fix by freeing after the access. >> >> I would rather

Re: [PATCH] 4.9.13 brcmfmac: fix use-after-free on resume

2017-03-06 Thread Daniel J Blueman
On 6 March 2017 at 21:00, Arend Van Spriel wrote: > + linux-wireless > > On 6-3-2017 8:14, Daniel J Blueman wrote: >> KASAN reported 'struct wireless_dev wdev' was read after being freed. >> Fix by freeing after the access. > > I would rather like to see the KASAN report, because something is off

Re: [PATCH] 4.9.13 brcmfmac: fix use-after-free on resume

2017-03-06 Thread Arend Van Spriel
+ linux-wireless On 6-3-2017 8:14, Daniel J Blueman wrote: > KASAN reported 'struct wireless_dev wdev' was read after being freed. > Fix by freeing after the access. I would rather like to see the KASAN report, because something is off here. This function is called with wdev as a parameter so how

[PATCH] 4.9.13 brcmfmac: fix use-after-free on resume

2017-03-05 Thread Daniel J Blueman
KASAN reported 'struct wireless_dev wdev' was read after being freed. Fix by freeing after the access. Signed-off-by: Daniel J Blueman diff --git a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.c b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/p2p.c index de19c7c..aa0f470 100644 --- a/