Received: by 2002:a05:6a10:17d3:0:0:0:0 with SMTP id hz19csp1922235pxb; Mon, 12 Apr 2021 09:42:27 -0700 (PDT) X-Google-Smtp-Source: ABdhPJy6GZmnmJEPAGVgGZRjPKxJY1IKbrNxnBQuWkqF+lE1vUXwQsDW3FrYm85UDBuIAnVeteXQ X-Received: by 2002:a17:90a:fc5:: with SMTP id 63mr30793619pjz.233.1618245747498; Mon, 12 Apr 2021 09:42:27 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1618245747; cv=none; d=google.com; s=arc-20160816; b=spc71DjOL5Z30BqyQ+2HDfHak+F3vZOHjeT4UH/BEd74xrX+wug2VjyB/iy6XfR89w ABP3PRD0aQJgZ+jEbr+7zQN1Mt9+7T1lrejdv2RlLGuYz8/UA6mUQ7NqxMzImS3lBp1x I1jyekjkEcYnierzXXuIrQ+AXQvkUNUZ5Oye6QNPQLUzjDQR2ZSKx8Jk+zZj3BUS2Btn +qOou3F7U0LH4sazRiler42Lt7P+1ZqjVt+/DTu5DFzrmhreCPexMw/cIcz2yQj4YObH 7qpk0dh7swdRKmio2eGMkY6i0j/MeXEQLM8J/YZV2cTGEG8GvVJrfs6mZ3E/PWNovw/r hU7g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=sdvz0i+RpN7ud7K/IUYuY7grNTUJY8g0uMs8janKQ5M=; b=h2qo6Zm5jgPRQgUe/l98h0jPWrG0KHWfC+R9niCIWa1zicTMyHeeaZ1namKbenbOCy VdO/LooXZXZXF12AHJeY/W2zrTmQB6r4lTpMdIStEg3owPjBBMZNIVOKI/dod6iFCJuF O63fV+bqTAE7vYtGN/EWnBcw9IlLX6mehkbfaliRb79emGQYoa4mdkmpJIJS3rgdvxH2 32rKUpWZa7p4cdvncZsvQeS0FTBOzuMIhQlPhDEfidAWvgfJ0VlaA+UfFhC+sECgPzuK 4WQZW0Tw22yrZwAT3NB4D79SJksLhZYc7ixvxbp+IFHYxkyligabtotQ0B1yDEKF5awX lVcQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=WJsYjGaQ; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id l23si14782270pjl.117.2021.04.12.09.42.14; Mon, 12 Apr 2021 09:42:27 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=WJsYjGaQ; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S245702AbhDLQlj (ORCPT + 99 others); Mon, 12 Apr 2021 12:41:39 -0400 Received: from mail.kernel.org ([198.145.29.99]:38886 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1343653AbhDLQfl (ORCPT ); Mon, 12 Apr 2021 12:35:41 -0400 Received: by mail.kernel.org (Postfix) with ESMTPSA id A9A22613D9; Mon, 12 Apr 2021 16:27:02 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1618244823; bh=iSCjhrH7qXR9SQ2svIa8dIQK+hhdiCawt2RDAuaR1As=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=WJsYjGaQMV92kfmwp+veHpbPZnAYQlqC5CqDlpgZZvBpAZx06TGdoYcxnPKQLnjmT pYDbAnXSMw38+Lgmt6iLGJ86An90iqHD+AvbpzFCGjLHyDwriIYjhJt+7UPKnCskKj Sd0+HCXl7L9mmMVJ5HKCTsHk0nlT3r1+Wkh2/JQx0JypwLJoBaerFVYZdM0ww2JetR UWb+6TiLb7096CJBh+6d6S0Fg/OICBGRmGSoYjSrsf4FXnpmIYCR0tZfNx7a3dgAj6 CejwTWsUXzPa2+07bORng7XgSHifxnWrhu7bnGsfQmJksCHs0JDvR9vXQl9b2VoZAq /tPQkPO2TtEaQ== From: Sasha Levin To: linux-kernel@vger.kernel.org, stable@vger.kernel.org Cc: Du Cheng , syzbot+5f9392825de654244975@syzkaller.appspotmail.com, Johannes Berg , Sasha Levin , linux-wireless@vger.kernel.org, netdev@vger.kernel.org Subject: [PATCH AUTOSEL 4.14 25/25] cfg80211: remove WARN_ON() in cfg80211_sme_connect Date: Mon, 12 Apr 2021 12:26:30 -0400 Message-Id: <20210412162630.315526-25-sashal@kernel.org> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20210412162630.315526-1-sashal@kernel.org> References: <20210412162630.315526-1-sashal@kernel.org> MIME-Version: 1.0 X-stable: review X-Patchwork-Hint: Ignore Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: linux-wireless@vger.kernel.org From: Du Cheng [ Upstream commit 1b5ab825d9acc0f27d2f25c6252f3526832a9626 ] A WARN_ON(wdev->conn) would trigger in cfg80211_sme_connect(), if multiple send_msg(NL80211_CMD_CONNECT) system calls are made from the userland, which should be anticipated and handled by the wireless driver. Remove this WARN_ON() to prevent kernel panic if kernel is configured to "panic_on_warn". Bug reported by syzbot. Reported-by: syzbot+5f9392825de654244975@syzkaller.appspotmail.com Signed-off-by: Du Cheng Link: https://lore.kernel.org/r/20210407162756.6101-1-ducheng2@gmail.com Signed-off-by: Johannes Berg Signed-off-by: Sasha Levin --- net/wireless/sme.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/wireless/sme.c b/net/wireless/sme.c index 8344153800e2..c9158360154a 100644 --- a/net/wireless/sme.c +++ b/net/wireless/sme.c @@ -530,7 +530,7 @@ static int cfg80211_sme_connect(struct wireless_dev *wdev, cfg80211_sme_free(wdev); } - if (WARN_ON(wdev->conn)) + if (wdev->conn) return -EINPROGRESS; wdev->conn = kzalloc(sizeof(*wdev->conn), GFP_KERNEL); -- 2.30.2