rtw89: fix null vif pointer when hw_scan fails
authorPo Hao Huang <phhuang@realtek.com>
Fri, 20 May 2022 07:17:27 +0000 (15:17 +0800)
committerKalle Valo <kvalo@kernel.org>
Mon, 30 May 2022 09:35:58 +0000 (12:35 +0300)
commit6d7d1fef3f18e395b0b38f85b85b74fe98584f88
tree0793052a4bea992c653151b40c05d4f74b809a8a
parent28000f7baa9ca667ae2a570c06ab86d32ab10f2b
rtw89: fix null vif pointer when hw_scan fails

Add this check to avoid crash by dereferencing a null pointer. When hwscan
fails due to no memory or dma failure, the scan flag in ieee80211_local is
cleared. So mac80211 determine that it's not hw_scan then calls
sw_scan_complete() with null vif, which is also freed during the fail.

Signed-off-by: Po Hao Huang <phhuang@realtek.com>
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
Signed-off-by: Kalle Valo <kvalo@kernel.org>
Link: https://lore.kernel.org/r/20220520071731.38563-3-pkshih@realtek.com
drivers/net/wireless/realtek/rtw89/core.c
drivers/net/wireless/realtek/rtw89/fw.c