[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20220827022452.823381-1-sunke32@huawei.com>
Date: Sat, 27 Aug 2022 10:24:52 +0800
From: Sun Ke <sunke32@...wei.com>
To: <johannes@...solutions.net>, <davem@...emloft.net>,
<edumazet@...gle.com>, <kuba@...nel.org>, <pabeni@...hat.com>
CC: <linux-wireless@...r.kernel.org>, <netdev@...r.kernel.org>,
<kernel-janitors@...r.kernel.org>, <johannes.berg@...el.com>,
<sunke32@...wei.com>
Subject: [PATCH] mac80211: fix potential deadlock in ieee80211_key_link()
Add the missing unlock before return in the error handling case.
Fixes: ccdde7c74ffd ("wifi: mac80211: properly implement MLO key handling")
Signed-off-by: Sun Ke <sunke32@...wei.com>
---
net/mac80211/key.c | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/net/mac80211/key.c b/net/mac80211/key.c
index 86aac87e0211..d89ec93b243b 100644
--- a/net/mac80211/key.c
+++ b/net/mac80211/key.c
@@ -865,8 +865,10 @@ int ieee80211_key_link(struct ieee80211_key *key,
if (link_id >= 0) {
link_sta = rcu_dereference_protected(sta->link[link_id],
lockdep_is_held(&sta->local->sta_mtx));
- if (!link_sta)
- return -ENOLINK;
+ if (!link_sta) {
+ ret = -ENOLINK;
+ goto out;
+ }
}
old_key = key_mtx_dereference(sdata->local, link_sta->gtk[idx]);
--
2.31.1
Powered by blists - more mailing lists