diff options
| author | Jeongik Cha <jeongik@google.com> | 2022-07-04 17:43:54 +0900 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2022-08-25 11:14:51 +0200 |
| commit | d09ea6200e7fd1a37b1e8f2b6b4cff633d6cca14 (patch) | |
| tree | 63f64065063fca5d0f9a6d978a18a1309fc558a4 /include/linux/buffer_head.h | |
| parent | 5e7338f4dd92b2f8915a82abfa1dd3ad3464bea0 (diff) | |
wifi: mac80211_hwsim: fix race condition in pending packet
commit 4ee186fa7e40ae06ebbfbad77e249e3746e14114 upstream.
A pending packet uses a cookie as an unique key, but it can be duplicated
because it didn't use atomic operators.
And also, a pending packet can be null in hwsim_tx_info_frame_received_nl
due to race condition with mac80211_hwsim_stop.
For this,
* Use an atomic type and operator for a cookie
* Add a lock around the loop for pending packets
Signed-off-by: Jeongik Cha <jeongik@google.com>
Link: https://lore.kernel.org/r/20220704084354.3556326-1-jeongik@google.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'include/linux/buffer_head.h')
0 files changed, 0 insertions, 0 deletions