summaryrefslogtreecommitdiffstats
path: root/drivers/net/wireless/mediatek/mt76/mt76x02_mac.c
diff options
context:
space:
mode:
authorFelix Fietkau <nbd@nbd.name>2023-04-14 14:10:54 +0200
committerFelix Fietkau <nbd@nbd.name>2023-04-17 15:39:05 +0200
commit5b8ccdfb943f6a03c676d2ea816dd38c149e920b (patch)
tree09f857888b4b3ae9e2260fc22ddf009e6300e956 /drivers/net/wireless/mediatek/mt76/mt76x02_mac.c
parent9e47dd9f64a47ae00ca0123017584c37209ee900 (diff)
downloadlinux-stable-5b8ccdfb943f6a03c676d2ea816dd38c149e920b.tar.gz
linux-stable-5b8ccdfb943f6a03c676d2ea816dd38c149e920b.tar.bz2
linux-stable-5b8ccdfb943f6a03c676d2ea816dd38c149e920b.zip
wifi: mt76: add missing locking to protect against concurrent rx/status calls
According to the documentation, ieee80211_rx_list must not run concurrently with ieee80211_tx_status (or its variants). Cc: stable@vger.kernel.org Fixes: 88046b2c9f6d ("mt76: add support for reporting tx status with skb") Reported-by: Brian Coverstone <brian@mainsequence.net> Signed-off-by: Felix Fietkau <nbd@nbd.name>
Diffstat (limited to 'drivers/net/wireless/mediatek/mt76/mt76x02_mac.c')
-rw-r--r--drivers/net/wireless/mediatek/mt76/mt76x02_mac.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/drivers/net/wireless/mediatek/mt76/mt76x02_mac.c b/drivers/net/wireless/mediatek/mt76/mt76x02_mac.c
index d3f74473e6fb..3e41d809ade3 100644
--- a/drivers/net/wireless/mediatek/mt76/mt76x02_mac.c
+++ b/drivers/net/wireless/mediatek/mt76/mt76x02_mac.c
@@ -631,8 +631,11 @@ void mt76x02_send_tx_status(struct mt76x02_dev *dev,
mt76_tx_status_unlock(mdev, &list);
- if (!status.skb)
+ if (!status.skb) {
+ spin_lock_bh(&dev->mt76.rx_lock);
ieee80211_tx_status_ext(mt76_hw(dev), &status);
+ spin_unlock_bh(&dev->mt76.rx_lock);
+ }
if (!len)
goto out;