Skip to content
Commit 9b25e398 authored by Fedor Pchelkin's avatar Fedor Pchelkin Committed by Kalle Valo
Browse files

wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function



It is stated that ath9k_htc_rx_msg() either frees the provided skb or
passes its management to another callback function. However, the skb is
not freed in case there is no another callback function, and Syzkaller was
able to cause a memory leak. Also minor comment fix.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.

Fixes: fb9987d0 ("ath9k_htc: Support for AR9271 chipset.")
Reported-by: default avatar <syzbot+e008dccab31bd3647609@syzkaller.appspotmail.com>
Reported-by: default avatar <syzbot+6692c72009680f7c4eb2@syzkaller.appspotmail.com>
Signed-off-by: default avatarFedor Pchelkin <pchelkin@ispras.ru>
Signed-off-by: default avatarAlexey Khoroshilov <khoroshilov@ispras.ru>
Acked-by: default avatarToke Høiland-Jørgensen <toke@toke.dk>
Signed-off-by: default avatarKalle Valo <quic_kvalo@quicinc.com>
Link: https://lore.kernel.org/r/20230104123546.51427-1-pchelkin@ispras.ru
parent 323d91d4
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment