Ming Lei e962610f81 wireless: ath9k-htc: fix possible use after free ... Inside ath9k_hif_usb_firmware_fail(), the instance of 'struct struct hif_device_usb' may be freed by ath9k_hif_usb_disconnect() after complete(&hif_dev->fw_done); But 'hif_dev' is still accessed after the line code above is executed. This patch fixes the issue by not accessing 'hif_dev' after 'complete(&hif_dev->fw_done)' inside ath9k_hif_usb_firmware_fail(). Cc: ath9k-devel@lists.ath9k.org Cc: "Luis R. Rodriguez" <mcgrof@qca.qualcomm.com> Cc: Jouni Malinen <jouni@qca.qualcomm.com> Cc: Vasanthakumar Thiagarajan <vthiagar@qca.qualcomm.com> Cc: Senthil Balasubramanian <senthilb@qca.qualcomm.com> Cc: "John W. Linville" <linville@tuxdriver.com> Signed-off-by: Ming Lei <ming.lei@canonical.com> Signed-off-by: John W. Linville <linville@tuxdriver.com>		2012-09-24 14:59:07 -04:00
..
ath	wireless: ath9k-htc: fix possible use after free	2012-09-24 14:59:07 -04:00
b43	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless	2012-09-07 15:07:55 -04:00
b43legacy	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next	2012-08-21 16:00:21 -04:00
brcm80211	brcmfmac: add e-scan support.	2012-09-12 14:19:16 -04:00
hostap	wireless: use is_broadcast_ether_addr() instead of memcmp()	2012-09-07 15:03:39 -04:00
ipw2x00	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless	2012-09-07 15:07:55 -04:00
iwlegacy	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next	2012-08-21 16:00:21 -04:00
iwlwifi	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next	2012-09-24 14:37:36 -04:00
libertas	libertas: set mac control synchronously during init	2012-09-11 15:32:02 -04:00
libertas_tf	mac80211: move TX station pointer and restructure TX	2012-07-31 16:18:39 +02:00
mwifiex	mwifiex: separate TxPD processing routine for AP	2012-09-11 15:31:58 -04:00
orinoco	orinoco: use is_zero_ether_addr() instead of memcmp()	2012-09-07 15:03:37 -04:00
p54	p54: fix off-by-one null pointer bug in p54_tx_80211	2012-09-11 15:13:54 -04:00
prism54	wireless: Remove casts to same type	2012-06-06 09:31:33 -07:00
rt2x00	rt2x00: add MediaTek/RaLink Rt3352 WiSoC	2012-09-11 15:13:50 -04:00
rtl818x	mac80211: move TX station pointer and restructure TX	2012-07-31 16:18:39 +02:00
rtlwifi	rtlwifi: Remove EXPERIMENTAL as pre-requisite for the drivers	2012-09-12 14:19:16 -04:00
ti	wl18xx: remove duplicated include from main.c	2012-09-07 15:03:40 -04:00
zd1211rw	zd1211rw: enable support for MFP	2012-09-11 15:13:50 -04:00
adm8211.c	mac80211: move TX station pointer and restructure TX	2012-07-31 16:18:39 +02:00
adm8211.h
airo.c	airo: remove duplicated include from airo.c	2012-09-07 15:03:40 -04:00
airo.h
airo_cs.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
at76c50x-usb.c	wireless: at76c50x: eliminate hex2str()	2012-09-11 15:13:53 -04:00
at76c50x-usb.h
atmel.c	wireless: Remove casts to same type	2012-06-06 09:31:33 -07:00
atmel.h
atmel_cs.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
atmel_pci.c	net/wireless: use module_pci_driver	2012-04-16 14:38:50 -04:00
Kconfig	iwmc3200wifi: remove driver for unavailable hardware	2012-07-10 12:16:32 -04:00
mac80211_hwsim.c	mac80211_hwsim: move module_init/exit	2012-09-06 17:09:30 +02:00
mac80211_hwsim.h
Makefile	iwmc3200wifi: remove driver for unavailable hardware	2012-07-10 12:16:32 -04:00
mwl8k.c	mac80211: move TX station pointer and restructure TX	2012-07-31 16:18:39 +02:00
ray_cs.c	wireless: Remove casts to same type	2012-06-06 09:31:33 -07:00
ray_cs.h
rayctl.h
rndis_wlan.c	rndis_wlan: remove pointless check from rndis_scan()	2012-09-11 15:31:44 -04:00
wl3501.h
wl3501_cs.c	wl3501_cs: use is_broadcast_ether_addr() instead of memcmp()	2012-09-07 15:03:40 -04:00
zd1201.c	USB: Disable hub-initiated LPM for comms devices.	2012-05-18 15:42:55 -07:00
zd1201.h