From: Sharon Dvir <[email protected]>

While freeing inactive queue, check mvmsta to be valid before
dereferencing it.  Found by Klocwork.

Signed-off-by: Sharon Dvir <[email protected]>
Signed-off-by: Luca Coelho <[email protected]>
---
 drivers/net/wireless/intel/iwlwifi/mvm/sta.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/sta.c 
b/drivers/net/wireless/intel/iwlwifi/mvm/sta.c
index a2a1fa06b781..fc6d854b04b6 100644
--- a/drivers/net/wireless/intel/iwlwifi/mvm/sta.c
+++ b/drivers/net/wireless/intel/iwlwifi/mvm/sta.c
@@ -495,6 +495,8 @@ static int iwl_mvm_free_inactive_queue(struct iwl_mvm *mvm, 
int queue,
        spin_unlock_bh(&mvm->queue_info_lock);
 
        mvmsta = iwl_mvm_sta_from_staid_protected(mvm, sta_id);
+       if (WARN_ON(!mvmsta))
+               return -EINVAL;
 
        disable_agg_tids = iwl_mvm_remove_sta_queue_marking(mvm, queue);
        /* Disable the queue */
-- 
2.11.0

Reply via email to