]> git.itanic.dy.fi Git - linux-stable/commit
staging: rtl8712: fix use after free bugs
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 30 Aug 2022 14:55:07 +0000 (17:55 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 15 Sep 2022 10:39:44 +0000 (12:39 +0200)
commit7dce6b0ee7d78667d6c831ced957a08769973063
tree002c7764afbb0c7a1dc7ad57840cb4ede9088ce1
parent29689973f14302f2eb06846b9e61342b0470d250
staging: rtl8712: fix use after free bugs

commit e230a4455ac3e9b112f0367d1b8e255e141afae0 upstream.

_Read/Write_MACREG callbacks are NULL so the read/write_macreg_hdl()
functions don't do anything except free the "pcmd" pointer.  It
results in a use after free.  Delete them.

Fixes: 2865d42c78a9 ("staging: r8712u: Add the new driver to the mainline kernel")
Cc: stable <stable@kernel.org>
Reported-by: Zheng Wang <hackerzheng666@gmail.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/Yw4ASqkYcUhUfoY2@kili
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/staging/rtl8712/rtl8712_cmd.c