Received: by 2002:a05:6a10:17d3:0:0:0:0 with SMTP id hz19csp1922236pxb; Mon, 12 Apr 2021 09:42:27 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwCPmLoZ2obZGW7J26tqYYrmbOaecR+Iqgp4SOfUJ+GtixqbwGyuXWLGBSMB6npkAgMmyLZ X-Received: by 2002:a17:902:ed14:b029:eb:8e3:bfc9 with SMTP id b20-20020a170902ed14b02900eb08e3bfc9mr3598012pld.54.1618245747560; Mon, 12 Apr 2021 09:42:27 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1618245747; cv=none; d=google.com; s=arc-20160816; b=Xs4kvPk1xyV055w2o2tsv+gLyqF+Mfvq7JvKwaW/z/ZZOjNNAR8Io5i3SBcLWwFUpu 47eaEAEEoAHeIrZruJcB8wacgNZLebWARRhRh0mgfWuXYqnrR5sz8TuRzdf/FLw4Kb4R i/rxwDcisImiLQfFdRhMC+uqtEeyu8CLbolK1VfodbaizzJHAxfu68NKrfxpi4FDVXoE ghHfgRX5YRHFGaQ8ofacaSGItUSNCb86LwMB/Celk9KZQSdQxaZaYWEktethbUvkeYcZ a6smsrexrQGmBokazz78y8z85/XBkK4CCBi7f9ltCqUfpa1ggkIBBRO9ZKgkYV2BpQqD NAuA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :dkim-signature; bh=JpI1ZaFGW8Ihd3HymdR6tYkaXQ9Kvk9uD8stoPw6UbM=; b=x9bgyL9st/ID9E0YOImCjzUwrd1IL7cKSC1Qp+n6V4xetqu4mZSzZfpKshYDmyLnOu nDbAyGFEyTutCBaYTR5cD+UNAcBzBylDcETtAQJoB7VB9qorT+8ukimtf2OyNfGQ8g/D IxumqQh1wFQFrAEJ2zk9cfi2MegEPcumu1gLCEhOWfyKl2gACOZPC6KO3tZPYFL5Jq+P JbnpLdI06nOtywnh2l4mxFA2e1k17wbn1xz3yZExx55u9mzg490whGRb5xusaP1Vy0GY mecBBjYnsCdx0cnnuv8FjQ9jYeic5RjzBjx776SMxLpLj+xgvgexeOVTGN16wDNn2iZC yClw== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b="QBe/QiHg"; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id pf14si14020010pjb.1.2021.04.12.09.42.13; Mon, 12 Apr 2021 09:42:27 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b="QBe/QiHg"; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S245555AbhDLQlb (ORCPT + 99 others); Mon, 12 Apr 2021 12:41:31 -0400 Received: from mail.kernel.org ([198.145.29.99]:35580 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S244861AbhDLQdZ (ORCPT ); Mon, 12 Apr 2021 12:33:25 -0400 Received: by mail.kernel.org (Postfix) with ESMTPSA id D17D3613A0; Mon, 12 Apr 2021 16:26:28 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1618244789; bh=XmCEre1kvvN7vGtm74bd0GsZhcgfBHLDP5wchb7qFzU=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=QBe/QiHgHdHh7Ru9YTbmr3mTwDU5Ry2bpQhVDQpShn+F1k3JKsWvJOskaqyU+AB6O OgQ1JdLKo9hguO2pgXGlk78Kmw7Jjuge6OUGVNIi554pbgPRRhS4Iu+m7hgWd5Umzx pS5ygMjSXBGJRdwBpz1lfsS9QviDV23PlHERPp46YhG+DI/eCu6na6KbQnI0DVWa1y oGInTeNqpjBSjMKKI72TjjLRymrrnvSmlaIvVsZAvoELimDiHOyEkG8fZS3B1/Y3mu FParOQt3BnNh6XzqDFHMSL/q8UBDxquS1ivo6ZIj2ftK1hVtfcaOPKCDqGg2ylYljk hb+Nom2KoZMWg== From: Sasha Levin To: linux-kernel@vger.kernel.org, stable@vger.kernel.org Cc: Du Cheng , syzbot+5f9392825de654244975@syzkaller.appspotmail.com, Johannes Berg , Sasha Levin , linux-wireless@vger.kernel.org, netdev@vger.kernel.org Subject: [PATCH AUTOSEL 4.19 28/28] cfg80211: remove WARN_ON() in cfg80211_sme_connect Date: Mon, 12 Apr 2021 12:25:53 -0400 Message-Id: <20210412162553.315227-28-sashal@kernel.org> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20210412162553.315227-1-sashal@kernel.org> References: <20210412162553.315227-1-sashal@kernel.org> MIME-Version: 1.0 X-stable: review X-Patchwork-Hint: Ignore Content-Transfer-Encoding: 8bit Precedence: bulk List-ID: X-Mailing-List: linux-wireless@vger.kernel.org From: Du Cheng [ Upstream commit 1b5ab825d9acc0f27d2f25c6252f3526832a9626 ] A WARN_ON(wdev->conn) would trigger in cfg80211_sme_connect(), if multiple send_msg(NL80211_CMD_CONNECT) system calls are made from the userland, which should be anticipated and handled by the wireless driver. Remove this WARN_ON() to prevent kernel panic if kernel is configured to "panic_on_warn". Bug reported by syzbot. Reported-by: syzbot+5f9392825de654244975@syzkaller.appspotmail.com Signed-off-by: Du Cheng Link: https://lore.kernel.org/r/20210407162756.6101-1-ducheng2@gmail.com Signed-off-by: Johannes Berg Signed-off-by: Sasha Levin --- net/wireless/sme.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/wireless/sme.c b/net/wireless/sme.c index f455b9af6815..9d8b106deb0b 100644 --- a/net/wireless/sme.c +++ b/net/wireless/sme.c @@ -530,7 +530,7 @@ static int cfg80211_sme_connect(struct wireless_dev *wdev, cfg80211_sme_free(wdev); } - if (WARN_ON(wdev->conn)) + if (wdev->conn) return -EINPROGRESS; wdev->conn = kzalloc(sizeof(*wdev->conn), GFP_KERNEL); -- 2.30.2