ACK: [SRU][Cosmic][PATCH 1/1] rtlwifi: Fix leak of skb when processing C2H_BT_INFO

Colin Ian King colin.king at canonical.com
Mon Jul 1 22:22:13 UTC 2019


On 01/07/2019 23:16, Connor Kuehl wrote:
> From: Larry Finger <Larry.Finger at lwfinger.net>
> 
> BugLink: https://bugs.launchpad.net/bugs/1831751
> 
> With commit 0a9f8f0a1ba9 ("rtlwifi: fix btmpinfo timeout while processing
> C2H_BT_INFO"), calling rtl_c2hcmd_enqueue() with rtl_c2h_fast_cmd() true,
> the routine returns without freeing that skb, thereby leaking it.
> 
> This issue has been discussed at https://github.com/lwfinger/rtlwifi_new/issues/401
> and the fix tested there.
> 
> Fixes: 0a9f8f0a1ba9 ("rtlwifi: fix btmpinfo timeout while processing C2H_BT_INFO")
> Reported-and-tested-by: Francisco Machado Magalhães Neto <franmagneto at gmail.com>
> Cc: Francisco Machado Magalhães Neto <franmagneto at gmail.com>
> Cc: Ping-Ke Shih <pkshih at realtek.com>
> Cc: Stable <stable at vger.kernel.org> # 4.18+
> Signed-off-by: Larry Finger <Larry.Finger at lwfinger.net>
> Signed-off-by: Kalle Valo <kvalo at codeaurora.org>
> (cherry picked from commit 8cfa272b0d321160ebb5b45073e39ef0a6ad73f2)
> Signed-off-by: Connor Kuehl <connor.kuehl at canonical.com>
> ---
>  drivers/net/wireless/realtek/rtlwifi/base.c | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/drivers/net/wireless/realtek/rtlwifi/base.c b/drivers/net/wireless/realtek/rtlwifi/base.c
> index 54c9f6ab0c8c..a46bcf676e42 100644
> --- a/drivers/net/wireless/realtek/rtlwifi/base.c
> +++ b/drivers/net/wireless/realtek/rtlwifi/base.c
> @@ -2289,6 +2289,7 @@ void rtl_c2hcmd_enqueue(struct ieee80211_hw *hw, struct sk_buff *skb)
>  
>  	if (rtl_c2h_fast_cmd(hw, skb)) {
>  		rtl_c2h_content_parsing(hw, skb);
> +		kfree_skb(skb);
>  		return;
>  	}
>  
> 

Seems valid to me.

Acked-by: Colin Ian King <colin.king at canonical.com>



More information about the kernel-team mailing list