diff options
| author | Deren Wu <deren.wu@mediatek.com> | 2024-01-13 17:00:23 +0800 |
|---|---|---|
| committer | Felix Fietkau <nbd@nbd.name> | 2024-02-22 09:55:19 +0100 |
| commit | a5a5f4413d91f395cb2d89829d376d7393ad48b9 (patch) | |
| tree | 483a67b8cd5e01adcac19f33875cb8257b6277b4 /drivers/net/wireless/mediatek | |
| parent | c957280ef6ab6bdf559a91ae693a6b34310697e3 (diff) | |
| download | linux-a5a5f4413d91f395cb2d89829d376d7393ad48b9.tar.gz linux-a5a5f4413d91f395cb2d89829d376d7393ad48b9.tar.bz2 linux-a5a5f4413d91f395cb2d89829d376d7393ad48b9.zip | |
wifi: mt76: mt7925e: fix use-after-free in free_irq()
From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test
to make sure the shared irq handler should be able to handle the unexpected
event after deregistration. For this case, let's apply MT76_REMOVED flag to
indicate the device was removed and do not run into the resource access
anymore.
Fixes: c948b5da6bbe ("wifi: mt76: mt7925: add Mediatek Wi-Fi7 driver for mt7925 chips")
Signed-off-by: Deren Wu <deren.wu@mediatek.com>
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Diffstat (limited to 'drivers/net/wireless/mediatek')
| -rw-r--r-- | drivers/net/wireless/mediatek/mt76/mt7925/pci.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/net/wireless/mediatek/mt76/mt7925/pci.c b/drivers/net/wireless/mediatek/mt76/mt7925/pci.c index 74cfba7675be..07b74d492ce1 100644 --- a/drivers/net/wireless/mediatek/mt76/mt7925/pci.c +++ b/drivers/net/wireless/mediatek/mt76/mt7925/pci.c @@ -427,6 +427,7 @@ static void mt7925_pci_remove(struct pci_dev *pdev) struct mt792x_dev *dev = container_of(mdev, struct mt792x_dev, mt76); mt7925e_unregister_device(dev); + set_bit(MT76_REMOVED, &mdev->phy.state); devm_free_irq(&pdev->dev, pdev->irq, dev); mt76_free_device(&dev->mt76); pci_free_irq_vectors(pdev); |