leandrof/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

cfg80211: Fix memory leak

Browse Source 
When a driver requests a specific regulatory domain after cfg80211 already
has one, a struct ieee80211_regdomain is leaked.

Reported-by: Larry Finger <Larry.Finger@lwfinger.net>
Tested-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: Larry Finger <Larry.Finger@lwfinger.net>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
This commit is contained in:
Larry Finger 2013-02-04 15:33:44 -06:00 committed by Johannes Berg
parent 78f42aee88
commit b7566fc363
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
net/wireless/reg.c
View File

@ -2189,10 +2189,15 @@ static int __set_regdom(const struct ieee80211_regdomain *rd)
* However if a driver requested this specific regulatory * However if a driver requested this specific regulatory
* domain we keep it for its private use * domain we keep it for its private use
*/ */
if (lr->initiator == NL80211_REGDOM_SET_BY_DRIVER) if (lr->initiator == NL80211_REGDOM_SET_BY_DRIVER) {
const struct ieee80211_regdomain *tmp;
tmp = get_wiphy_regdom(request_wiphy);
rcu_assign_pointer(request_wiphy->regd, rd); rcu_assign_pointer(request_wiphy->regd, rd);
else rcu_free_regdom(tmp);
} else {
kfree(rd); kfree(rd);
}
rd = NULL; rd = NULL;