Lorenzo Bianconi <lorenzo@xxxxxxxxxx> wrote:
> Fix pointer overwrite in mt7921s_tx_prepare_skb and
> mt7663_usb_sdio_tx_prepare_skb routines since in
> commit '2a9e9857473b ("mt76: fix possible pktid leak")
> mt76_tx_status_skb_add() has been moved out of
> mt7921s_write_txwi()/mt7663_usb_sdio_write_txwi() overwriting
> hw key pointer in ieee80211_tx_info structure. Fix the issue saving
> key pointer before running mt76_tx_status_skb_add().
>
> Fixes: 2a9e9857473b ("mt76: fix possible pktid leak")
> Tested-by: Deren Wu <deren.wu@xxxxxxxxxxxx>
> Signed-off-by: Lorenzo Bianconi <lorenzo@xxxxxxxxxx>
Patch applied to wireless-drivers.git, thanks.
191587cd1a5f mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi
--
https://patchwork.kernel.org/project/linux-wireless/patch/eba40c84b6d114f618e2ae486cc6d0f2e9272cf9.1638193069.git.lorenzo@xxxxxxxxxx/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
