diff options
author | Johannes Berg | 2023-03-01 12:09:29 +0200 |
---|---|---|
committer | Greg Kroah-Hartman | 2023-03-22 13:33:43 +0100 |
commit | 87e80ea4fbc9ce2f2005905fdbcd38baaa47463a (patch) | |
tree | 6e86f6254bfffbabb8747a503f87f4ec512c34b4 /net/wireless/nl80211.c | |
parent | 928fa441f14987f0b647b0d83d2d9c0823584598 (diff) |
wifi: nl80211: fix NULL-ptr deref in offchan check
[ Upstream commit f624bb6fad23df3270580b4fcef415c6e7bf7705 ]
If, e.g. in AP mode, the link was already created by userspace
but not activated yet, it has a chandef but the chandef isn't
valid and has no channel. Check for this and ignore this link.
Fixes: 7b0a0e3c3a88 ("wifi: cfg80211: do some rework towards MLO link APIs")
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Gregory Greenman <gregory.greenman@intel.com>
Link: https://lore.kernel.org/r/20230301115906.71bd4803fbb9.Iee39c0f6c2d3a59a8227674dc55d52e38b1090cf@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'net/wireless/nl80211.c')
-rw-r--r-- | net/wireless/nl80211.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/wireless/nl80211.c b/net/wireless/nl80211.c index 4d4de49f7ab6..4c6748aa6a1c 100644 --- a/net/wireless/nl80211.c +++ b/net/wireless/nl80211.c @@ -8815,7 +8815,7 @@ static bool cfg80211_off_channel_oper_allowed(struct wireless_dev *wdev, struct cfg80211_chan_def *chandef; chandef = wdev_chandef(wdev, link_id); - if (!chandef) + if (!chandef || !chandef->chan) continue; /* |