[Bug 288437] Re: [iwl_eeprom_query16] Kernel general protection fault w/ NetworkManager/iwl4965

[Kai Kasurinen]

Fixed in upstream:

iwlwifi: clean key table in iwl_clear_stations_table function

This patch cleans uCode key table bit map iwl_clear_stations_table
since all stations are cleared also the key table must be.

Since the keys are not removed properly on suspend by mac80211
this may result in exhausting key table on resume leading
to memory corruption during removal

This patch also fixes a memory corruption problem reported in
http://marc.info/?l=linux-wireless&m=122641417231586&w=2 and tracked in
http://bugzilla.kernel.org/show_bug.cgi?id=12040.

When the key is removed a second time the offset is set to 255 - this
index is not valid for the ucode_key_table and corrupts the eeprom pointer
(which is 255 bits from ucode_key_table).

Signed-off-by: Tomas Winkler <tomas.winkler at intel.com>
Signed-off-by: Zhu Yi <yi.zhu at intel.com>
Reported-by: Carlos R. Mafra <crmafra2 at gmail.com>
Reported-by: Lukas Hejtmanek <xhejtman at ics.muni.cz>

<http://git.kernel.org/?p=linux/kernel/git/iwlwifi/iwlwifi-2.6.git;a=commit;h=24e8b9a24de9326fa83464c2505465893c538113>

** Summary changed:

- Kernel general protection fault w/ NetworkManager/iwl4965
+ [iwl_eeprom_query16] Kernel general protection fault w/ NetworkManager/iwl4965

-- 
[iwl_eeprom_query16] Kernel general protection fault w/ NetworkManager/iwl4965
https://bugs.launchpad.net/bugs/288437
You received this bug notification because you are a member of Kernel
Bugs, which is subscribed to Linux.