Dan Carpenter <dan.carpenter@xxxxxxxxxx> wrote:
> This code needs to use skb_queue_walk_safe() instead of skb_queue_walk()
> because it frees the list iterator.
>
> Fixes: d95984b5580d ("rtw88: fix memory overrun and memory leak during hw_scan")
> Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
> Acked-by: Ping-Ke Shih <pkshih@xxxxxxxxxxx>
Patch applied to wireless-next.git, thanks.
a954f29aea5d rtw88: fix use after free in rtw_hw_scan_update_probe_req()
--
https://patchwork.kernel.org/project/linux-wireless/patch/20220203082532.GA25151@kili/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
