UPSTREAM: wifi: mac80211_hwsim: fix race condition in pending packet
commit 4ee186fa upstream. A pending packet uses a cookie as an unique key, but it can be duplicated because it didn't use atomic operators. And also, a pending packet can be null in hwsim_tx_info_frame_received_nl due to race condition with mac80211_hwsim_stop. For this, * Use an atomic type and operator for a cookie * Add a lock around the loop for pending packets Signed-off-by:Jeongik Cha <jeongik@google.com> Link: https://lore.kernel.org/r/20220704084354.3556326-1-jeongik@google.com Signed-off-by:
Johannes Berg <johannes.berg@intel.com> Signed-off-by:
Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit eb8fc4277b628ac81db806c130a500dd48a9e524) Signed-off-by:
Carlos Llamas <cmllamas@google.com> Bug: 236994625 Change-Id: Ic6613c8869a51b5de303e40406f023af689b9d64
Loading
Please register or sign in to comment