diff options
| author | Lorenzo Bianconi <lorenzo@kernel.org> | 2026-06-21 15:24:59 +0200 |
|---|---|---|
| committer | Felix Fietkau <nbd@nbd.name> | 2026-07-22 06:10:47 +0000 |
| commit | 2c1fb2335f5e3afb34f91bc07ecb63517c328090 (patch) | |
| tree | 6916c4299d417ef92f3f190b4fbb7a4d4f69c638 | |
| parent | 8e9db062654a388d0fa587acbeeae68dd33eba41 (diff) | |
| download | linux-2c1fb2335f5e3afb34f91bc07ecb63517c328090.tar.gz linux-2c1fb2335f5e3afb34f91bc07ecb63517c328090.zip | |
wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()
mt76_connac_get_he_phy_cap routine can theoretically return NULL so
check cap pointer before dereferencing it.
Fixes: d0e274af2f2e4 ("mt76: mt76_connac: create mcu library")
Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org>
Link: https://patch.msgid.link/20260621-mt76_connac_get_he_phy_cap-fix-v1-1-ed4ccf7a0363@kernel.org
Signed-off-by: Felix Fietkau <nbd@nbd.name>
| -rw-r--r-- | drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c b/drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c index 6596c9e198f4..58b0b15e4fd6 100644 --- a/drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c +++ b/drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c @@ -1458,6 +1458,8 @@ mt76_connac_mcu_uni_bss_he_tlv(struct mt76_phy *phy, struct ieee80211_vif *vif, struct bss_info_uni_he *he; cap = mt76_connac_get_he_phy_cap(phy, vif); + if (!cap) + return; he = (struct bss_info_uni_he *)tlv; he->he_pe_duration = vif->bss_conf.htc_trig_based_pkt_ext; |