Received: by 2002:a05:6358:11c7:b0:104:8066:f915 with SMTP id i7csp889136rwl; Fri, 24 Mar 2023 03:30:28 -0700 (PDT) X-Google-Smtp-Source: AKy350bSbMzKZKzffe3QaDrxlZ/+3hf0ZSycqebCTZmMlodv+wkwOHjcbys5B+1gEy+tXSH99mp+ X-Received: by 2002:a17:906:1d0a:b0:8b1:7b10:61d5 with SMTP id n10-20020a1709061d0a00b008b17b1061d5mr2365100ejh.33.1679653828370; Fri, 24 Mar 2023 03:30:28 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1679653828; cv=none; d=google.com; s=arc-20160816; b=J2B3VKq+8sBrpGJ1N5KERoEB07sFGqwnjRZllP0kXfQDDTji/qCann5UyhOU+gB9x0 Y81PcqAyvkcTQYHwUiCbGw4h0oarHPni+eNjsBWr2hb6YtvKeUjf3GG7bq6gAfgAcF3S UPTB97lNQhC4rDimhV2daSpP8hiHXUhM0cXDD+2+omygShJp0O9YWr59abDgtkYy9fmp 78bWxZgupIUDoUW9AcvVyME+E1M5y4FI9b40s6WW9Pg7U+Hhs/epdkumY18apTbd3gAW dNhMiVHEssg46NubVpulYXzCPtDtUOLPMUt8tQe/P3EhCNj0Hz3gocetN8G7Av5A5Cg3 9oTw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:in-reply-to:from :references:cc:to:content-language:subject:user-agent:mime-version :date:message-id:dkim-signature; bh=TGpbCRl1WSOCJVs+79IUG4QHP2Bbm6sFU1OBtSjF7Eg=; b=g6XWcS8uUEx3t7rxwHQ2VeX8E/GkochldHTs4ThD+r1j93xgDz5vtiEnG4AP9iWI/N IOUvd5q4cz2327F4IyxVoRRZ+tUen17Q7UKde83/O50uZpniaJBF0TokZiNUiVrr4cWG QxapSz/P6w8I1dG/pUk/qlwv6eeAjxZpENKSB9X9NsMZzzh4vEjYqw5CKWIHbn5LZt/n 5L+BWMjqbpeOIzqQsaJmx2XM5L4vWc2zAjfoJtGHigPR04PFm8qDrkWA/MFlGczhSKzR aCgewNVQEdPecmHlwh4/bfiCin5GC4/rIIZkzdWluk/bbs6KdOhbzCtynTJ5YwMWn9x5 rJLQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=fail header.i=@nbd.name header.s=20160729 header.b=Bo8yYusM; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=nbd.name Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id g1-20020a17090604c100b0092817af6f65si19821364eja.234.2023.03.24.03.29.52; Fri, 24 Mar 2023 03:30:28 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=fail header.i=@nbd.name header.s=20160729 header.b=Bo8yYusM; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=nbd.name Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231161AbjCXKTs (ORCPT + 59 others); Fri, 24 Mar 2023 06:19:48 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:35246 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231684AbjCXKTn (ORCPT ); Fri, 24 Mar 2023 06:19:43 -0400 Received: from nbd.name (nbd.name [46.4.11.11]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 5F635132E4 for ; Fri, 24 Mar 2023 03:19:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=nbd.name; s=20160729; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:From: References:Cc:To:Subject:MIME-Version:Date:Message-ID:Sender:Reply-To: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=TGpbCRl1WSOCJVs+79IUG4QHP2Bbm6sFU1OBtSjF7Eg=; b=Bo8yYusM30LhhdqhFWvRr5ge8G rhwEzh7yCr5tUJUN38YJjoozCclIP1s1cKlrhk4FuIeSm9oP3hUK2tH1rZq3BmDOsKVejNIIvsvpX i89Z3Ip3JScc6AfnRx8dhOT4mc/3EeIOb+YEzlq/xK8YiJzlNgKSeu9nzM5DC2E31zFs=; Received: from p54ae9730.dip0.t-ipconnect.de ([84.174.151.48] helo=nf.local) by ds12 with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1pfeWA-006JKI-WB; Fri, 24 Mar 2023 11:19:31 +0100 Message-ID: <829a59bc-dc57-9cda-7da9-8033ca419fd2@nbd.name> Date: Fri, 24 Mar 2023 11:19:30 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.9.0 Subject: Re: [PATCH v3] wireless: mt76: mt7921: Fix use-after-free in fw features query. Content-Language: en-US To: Kalle Valo Cc: Lorenzo Bianconi , linux-wireless@vger.kernel.org, lorenzo.bianconi@redhat.com, Ben Greear References: <51fd8f76494348aa9ecbf0abc471ebe47a983dfd.1679502607.git.lorenzo@kernel.org> <87zg82ty8b.fsf@kernel.org> From: Felix Fietkau In-Reply-To: <87zg82ty8b.fsf@kernel.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-0.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DKIM_VALID_EF,NICE_REPLY_A,SPF_HELO_NONE,SPF_NONE autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-wireless@vger.kernel.org On 24.03.23 08:17, Kalle Valo wrote: > Felix Fietkau writes: > >> On 22.03.23 17:37, Lorenzo Bianconi wrote: >>> From: Ben Greear >>> >>> Stop referencing 'features' memory after release_firmware is called. >>> >>> Fixes this crash: >>> >>> RIP: 0010:mt7921_check_offload_capability+0x17d >>> mt7921_pci_probe+0xca/0x4b0 >>> ... >>> >>> Signed-off-by: Ben Greear >>> Signed-off-by: Lorenzo Bianconi > > The title should have "wifi:", not "wireless:". > >> Acked-by: Felix Fietkau > > Felix, do you mean I should take this to wireless tree? Sure - Felix