Home Home > GIT Browse > SLE12-SP5-AZURE
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTakashi Iwai <tiwai@suse.de>2019-09-05 14:34:34 +0200
committerTakashi Iwai <tiwai@suse.de>2019-09-05 14:34:34 +0200
commita7d4c265ef8b370923d2ae678c07df6387cc7316 (patch)
tree2f5e833b35bba5ba9109b97badac001764919eff
parent2c7d41a1a9531ce52b129336ceec4c19fe9028ac (diff)
rsi: add fix for crash during assertions
(CVE-2018-21008,bsc#1149591).
-rw-r--r--patches.suse/rsi-add-fix-for-crash-during-assertions.patch38
-rw-r--r--series.conf1
2 files changed, 39 insertions, 0 deletions
diff --git a/patches.suse/rsi-add-fix-for-crash-during-assertions.patch b/patches.suse/rsi-add-fix-for-crash-during-assertions.patch
new file mode 100644
index 0000000000..677a81e06e
--- /dev/null
+++ b/patches.suse/rsi-add-fix-for-crash-during-assertions.patch
@@ -0,0 +1,38 @@
+From abd39c6ded9db53aa44c2540092bdd5fb6590fa8 Mon Sep 17 00:00:00 2001
+From: Sanjay Konduri <sanjay.konduri@redpinesignals.com>
+Date: Tue, 15 May 2018 14:34:30 +0530
+Subject: [PATCH] rsi: add fix for crash during assertions
+Git-commit: abd39c6ded9db53aa44c2540092bdd5fb6590fa8
+Patch-mainline: v4.18-rc1
+References: CVE-2018-21008,bsc#1149591
+
+Observed crash in some scenarios when assertion has occurred,
+this is because hw structure is freed and is tried to get
+accessed in some functions where null check is already
+present. So, avoided the crash by making the hw to NULL after
+freeing.
+
+Signed-off-by: Sanjay Konduri <sanjay.konduri@redpinesignals.com>
+Signed-off-by: Sushant Kumar Mishra <sushant.mishra@redpinesignals.com>
+Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
+Acked-by: Takashi Iwai <tiwai@suse.de>
+
+---
+ drivers/net/wireless/rsi/rsi_91x_mac80211.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/drivers/net/wireless/rsi/rsi_91x_mac80211.c b/drivers/net/wireless/rsi/rsi_91x_mac80211.c
+index 3faa0449a5ef..bfa7569c85bb 100644
+--- a/drivers/net/wireless/rsi/rsi_91x_mac80211.c
++++ b/drivers/net/wireless/rsi/rsi_91x_mac80211.c
+@@ -245,6 +245,7 @@ void rsi_mac80211_detach(struct rsi_hw *adapter)
+ ieee80211_stop_queues(hw);
+ ieee80211_unregister_hw(hw);
+ ieee80211_free_hw(hw);
++ adapter->hw = NULL;
+ }
+
+ for (band = 0; band < NUM_NL80211_BANDS; band++) {
+--
+2.16.4
+
diff --git a/series.conf b/series.conf
index 6df3dfee74..9569ca9189 100644
--- a/series.conf
+++ b/series.conf
@@ -17175,6 +17175,7 @@
patches.suse/net-hns3-Optimize-the-PF-s-process-of-updating-multi.patch
patches.suse/net-hns3-Optimize-the-VF-s-process-of-updating-multi.patch
patches.suse/mwifiex-correct-histogram-data-with-appropriate-inde
+ patches.suse/rsi-add-fix-for-crash-during-assertions.patch
patches.suse/wlcore-sdio-check-for-valid-platform-device-data-bef
patches.suse/mwifiex-handle-race-during-mwifiex_usb_disconnect
patches.suse/iwlmvm-tdls-Check-TDLS-channel-switch-support