Andrei Otcheretianski 7a48064a42 iwlwifi: mvm: Check the sta is not NULL in iwl_mvm_cfg_he_sta() ... [ Upstream commit 12d47f0ea5 ] Fix a kernel panic by checking that the sta is not NULL. This could happen during a reconfig flow, as mac80211 moves the sta between all the states without really checking if the previous state was successfully set. So, if for some reason we failed to add back the station, subsequent calls to sta_state() callback will be done when the station is NULL. This would result in a following panic: BUG: unable to handle kernel NULL pointer dereference at 0000000000000040 IP: iwl_mvm_cfg_he_sta+0xfc/0x690 [iwlmvm] [..] Call Trace: iwl_mvm_mac_sta_state+0x629/0x6f0 [iwlmvm] drv_sta_state+0xf4/0x950 [mac80211] ieee80211_reconfig+0xa12/0x2180 [mac80211] ieee80211_restart_work+0xbb/0xe0 [mac80211] process_one_work+0x1e2/0x610 worker_thread+0x4d/0x3e0 [..] Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@intel.com> Signed-off-by: Luca Coelho <luciano.coelho@intel.com> Signed-off-by: Kalle Valo <kvalo@codeaurora.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-02-24 08:37:01 +01:00
..
accessibility	…
acpi	ACPI: button: Add DMI quirk for Razer Blade Stealth 13 late 2019 lid switch	2020-02-24 08:36:43 +01:00
amba	ARM updates for 5.4-rc:	2019-10-23 06:26:33 -04:00
android	binder: fix log spam for existing debugfs file creation.	2020-02-01 09:34:35 +00:00
ata	libata: Fix retrieving of active qcs	2020-01-09 10:19:59 +01:00
atm	fore200e: Fix incorrect checks of NULL pointer dereference	2020-02-24 08:36:36 +01:00
auxdisplay	…
base	driver core: platform: fix u32 greater or equal to zero comparison	2020-02-24 08:36:55 +01:00
bcma	…
block	rbd: work around -Wuninitialized warning	2020-02-24 08:36:59 +01:00
bluetooth	Bluetooth: btusb: Disable runtime suspend on Realtek devices	2020-02-11 04:35:09 -08:00
bus	bus: ti-sysc: Implement quirk handling for CLKDM_NOAUTO	2020-02-24 08:36:35 +01:00
cdrom	cdrom: respect device capabilities during opening action	2020-01-04 19:18:25 +01:00
char	char: hpet: Fix out-of-bounds read bug	2020-02-24 08:36:59 +01:00
clk	clk: uniphier: Add SCSSI clock gate for each channel	2020-02-24 08:36:42 +01:00
clocksource	clocksource: davinci: only enable clockevents once tim34 is initialized	2020-02-24 08:36:46 +01:00
connector	…
counter	…
cpufreq	cpufreq: Avoid creating excessively large stack frames	2020-02-11 04:35:25 -08:00
cpuidle	cpuidle: teo: Avoid using "early hits" incorrectly	2020-02-05 21:22:52 +00:00
crypto	crypto: chtls - Fixed memory leak	2020-02-24 08:36:40 +01:00
dax	…
dca	…
devfreq	PM / devfreq: rk3399_dmc: Add COMPILE_TEST and HAVE_ARM_SMCCC dependency	2020-02-24 08:36:41 +01:00
dio	…
dma	dmaengine: imx-sdma: Fix memory leak	2020-02-24 08:36:40 +01:00
dma-buf	dma-buf: Fix memory leak in sync_file_merge()	2019-12-21 11:04:48 +01:00
edac	EDAC/sifive: Fix return value check in ecc_register()	2020-02-24 08:36:51 +01:00
eisa	…
extcon	extcon-intel-cht-wc: Don't reset USB data connection at probe	2020-02-01 09:34:46 +00:00
firewire	net: add annotations on hh->hh_len lockless accesses	2020-01-09 10:20:06 +01:00
firmware	firmware: arm_scmi: Fix doorbell ring logic for !CONFIG_64BIT	2020-01-26 10:01:07 +01:00
fpga	…
fsi	fsi: core: Fix small accesses and unaligned offsets via sysfs	2019-12-31 16:45:09 +01:00
gnss	…
gpio	gpiolib: Set lockdep class for hierarchical irq domains	2020-02-24 08:36:49 +01:00
gpu	radeon: insert 10ms sleep in dce5_crtc_load_lut	2020-02-24 08:37:00 +01:00
greybus	…
hid	HID: steam: Fix input device disappearing	2020-02-01 09:34:46 +00:00
hsi	…
hv	hv_balloon: Balloon up according to request page number	2020-02-11 04:35:21 -08:00
hwmon	hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions.	2020-02-19 19:53:07 +01:00
hwspinlock	…
hwtracing	intel_th: msu: Fix window switching without windows	2019-12-31 16:46:09 +01:00
i2c	i2c: stm32f7: report dma error during probe	2020-01-26 10:01:06 +01:00
i3c	…
ide	ide: serverworks: potential overflow in svwks_set_pio_mode()	2020-02-24 08:36:53 +01:00
idle	…
iio	iio: st_gyro: Correct data for LSM9DS0 gyro	2020-02-01 09:34:36 +00:00
infiniband	RDMA/mlx5: Don't fake udata for kernel path	2020-02-24 08:36:51 +01:00
input	Input: edt-ft5x06 - work around first register access error	2020-02-24 08:36:45 +01:00
interconnect	interconnect: qcom: qcs404: Walk the list safely on node removal	2019-12-17 19:55:39 +01:00
iommu	iommu/vt-d: Remove unnecessary WARN_ON_ONCE()	2020-02-24 08:36:57 +01:00
ipack	…
irqchip	irqchip/gic-v3-its: Reference to its_invall_cmd descriptor when building INVALL	2020-02-24 08:37:01 +01:00
isdn	net: use skb_queue_empty_lockless() in poll() handlers	2019-10-28 13:33:41 -07:00
leds	leds: pca963x: Fix open-drain initialization	2020-02-24 08:36:24 +01:00
lightnvm	…
macintosh	cpufreq: Use per-policy frequency QoS	2019-10-21 02:05:21 +02:00
mailbox	mailbox: imx: Fix Tx doorbell shutdown path	2020-01-04 19:18:30 +01:00
mcb	…
md	bcache: fix incorrect data type usage in btree_flush_write()	2020-02-24 08:37:01 +01:00
media	media: uvcvideo: Add a quirk to force GEO GC6500 Camera bits-per-pixel value	2020-02-24 08:36:56 +01:00
memory	memory: mtk-smi: Add PM suspend and resume ops	2020-01-17 19:48:59 +01:00
memstick	memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'	2019-10-09 11:08:03 +02:00
message	scsi: mptfusion: Fix double fetch bug in ioctl	2020-01-23 08:22:35 +01:00
mfd	mfd: max77650: Select REGMAP_IRQ in Kconfig	2020-02-14 16:34:19 -05:00
misc	misc: xilinx_sdfec: fix xsdfec_poll()'s return type	2020-02-24 08:36:47 +01:00
mmc	mmc: core: Rework wp-gpio handling	2020-02-19 19:53:10 +01:00
mtd	mtd: sharpslpart: Fix unsigned comparison to zero	2020-02-14 16:34:18 -05:00
mux	…
net	iwlwifi: mvm: Check the sta is not NULL in iwl_mvm_cfg_he_sta()	2020-02-24 08:37:01 +01:00
nfc	NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu().	2020-02-24 08:36:33 +01:00
ntb	…
nubus	…
nvdimm	libnvdimm/btt: fix variable 'rc' set but not used	2020-01-04 19:18:12 +01:00
nvme	nvme-pci: remove nvmeq->tags	2020-02-24 08:37:01 +01:00
nvmem	nvmem: core: fix memory abort in cleanup path	2020-02-11 04:35:21 -08:00
of	of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc	2020-02-11 04:35:25 -08:00
opp	opp: Free static OPPs on errors while adding them	2020-02-24 08:36:34 +01:00
oprofile	…
parisc	parisc: Remove 32-bit DMA enforcement from sba_iommu	2019-10-14 21:44:26 +02:00
parport	parport: load lowlevel driver if ports not found	2019-12-31 16:45:25 +01:00
pci	PCI: Add DMA alias quirk for PLX PEX NTB	2020-02-24 08:36:37 +01:00
pcmcia	…
perf	perf/imx_ddr: Fix cpu hotplug state cleanup	2020-02-24 08:36:49 +01:00
phy	phy: qualcomm: Adjust indentation in read_poll_timeout	2020-02-11 04:35:45 -08:00
pinctrl	pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs	2020-02-24 08:36:41 +01:00
platform	platform/x86: intel_mid_powerbtn: Take a copy of ddata	2020-02-14 16:34:12 -05:00
pnp	…
power	power: supply: ltc2941-battery-gauge: fix use-after-free	2020-02-11 04:35:24 -08:00
powercap	powercap: intel_rapl: add NULL pointer check to rapl_mmio_cpu_online()	2020-01-14 20:08:18 +01:00
pps	…
ps3	…
ptp	ptp: free ptp device pin descriptors properly	2020-01-23 08:22:51 +01:00
pwm	pwm: Remove set but not set variable 'pwm'	2020-02-24 08:36:53 +01:00
rapidio	…
ras	…
regulator	regulator: core: Fix exported symbols to the exported GPL version	2020-02-24 08:36:54 +01:00
remoteproc	remoteproc: Initialize rproc_class before use	2020-02-24 08:36:54 +01:00
reset	reset: uniphier: Add SCSSI reset control for each channel	2020-02-24 08:36:41 +01:00
rpmsg	rpmsg: char: release allocated memory	2020-01-14 20:08:37 +01:00
rtc	rtc: i2c/spi: Avoid inclusion of REGMAP support when not needed	2020-02-24 08:36:31 +01:00
s390	s390/pkey: fix missing length of protected key on return	2020-02-19 19:53:04 +01:00
sbus	…
scsi	scsi: iscsi: Don't destroy session if there are outstanding connections	2020-02-24 08:36:50 +01:00
sfi	…
sh	…
siox	…
slimbus	…
soc	soc/tegra: fuse: Correct straps' address for older Tegra124 device trees	2020-02-24 08:36:45 +01:00
soundwire	soundwire: intel: fix PDI/stream mapping for Bulk	2019-12-31 16:45:11 +01:00
spi	spi: spi-fsl-qspi: Ensure width is respected in spi-mem operations	2020-02-24 08:36:54 +01:00
spmi	spmi: pmic-arb: Set lockdep class for hierarchical irq domains	2020-02-19 19:53:07 +01:00
ssb	…
staging	staging: rtl8188: avoid excessive stack usage	2020-02-24 08:36:44 +01:00
target	scsi: RDMA/isert: Fix a recently introduced regression related to logout	2020-01-29 16:45:30 +01:00
tc	…
tee	tee: optee: Fix compilation issue with nommu	2020-02-05 21:22:49 +00:00
thermal	thermal: Fix deadlock in thermal thermal_zone_device_check	2019-12-13 08:43:21 +01:00
thunderbolt	thunderbolt: Power cycle the router if NVM authentication fails	2019-12-04 22:30:50 +01:00
tty	tty: synclink_gt: Adjust indentation in several functions	2020-02-24 08:36:47 +01:00
uio	uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol()	2020-02-24 08:36:27 +01:00
usb	usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue	2020-02-24 08:36:49 +01:00
vfio	vfio/spapr/nvlink2: Skip unpinning pages on error exit	2020-02-24 08:36:43 +01:00
vhost	vhost/vsock: accept only packets with the right dst_cid	2020-01-04 19:19:18 +01:00
video	pxa168fb: Fix the function used to release some memory in an error handling path	2020-02-24 08:36:25 +01:00
virt	virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr	2019-10-10 14:50:32 +02:00
virtio	virtio_balloon: Fix memory leaks on errors in virtballoon_probe()	2020-02-11 04:35:47 -08:00
visorbus	visorbus: fix uninitialized variable access	2020-02-24 08:36:47 +01:00
vlynq	…
vme	vme: bridges: reduce stack usage	2020-02-24 08:36:48 +01:00
w1	w1: ds250x: Fix build error without CRC16	2019-10-10 15:35:41 +02:00
watchdog	drivers: watchdog: stm32_iwdg: set WDOG_HW_RUNNING at probe	2020-02-14 16:34:18 -05:00
xen	xen/balloon: Support xend-based toolstack take two	2020-02-11 04:35:36 -08:00
zorro	…
Kconfig	…
Makefile	…