Duoming Zhou <[email protected]> wrote:
> The kzalloc() in brcmf_pmksa_v3_op() will return null if the
> physical memory has run out. As a result, if we dereference
> the null value, the null pointer dereference bug will happen.
>
> Return -ENOMEM from brcmf_pmksa_v3_op() if kzalloc() fails
> for pmk_op.
>
> Fixes: a96202acaea4 ("wifi: brcmfmac: cfg80211: Add support for PMKID_V3 operations")
> Acked-by: Arend van Spriel <[email protected]>
> Signed-off-by: Duoming Zhou <[email protected]>
> Reviewed-by: Kees Cook <[email protected]>
Patch applied to wireless-next.git, thanks.
b4152222e04c wifi: brcm80211: handle pmk_op allocation failure
--
https://patchwork.kernel.org/project/linux-wireless/patch/[email protected]/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches