Re: [4.9.13] brcmf use-after-free on resume

2017-03-27 Thread Arend Van Spriel
On 27-3-2017 11:24, Arend Van Spriel wrote: > + Johannes > > On 6-3-2017 11:48, Arend Van Spriel wrote: >> + linux-wireless >> >> On 6-3-2017 8:04, Daniel J Blueman wrote: >>> When resuming from suspend with a BCM43602 on Ubuntu 16.04 with >>> 4.9.13, we see use after free [1]. >>> >>> We see the

Re: [4.9.13] brcmf use-after-free on resume

2017-03-27 Thread Arend Van Spriel
+ Johannes On 6-3-2017 11:48, Arend Van Spriel wrote: > + linux-wireless > > On 6-3-2017 8:04, Daniel J Blueman wrote: >> When resuming from suspend with a BCM43602 on Ubuntu 16.04 with >> 4.9.13, we see use after free [1]. >> >> We see the struct cfg80211_ops is accessed in the resume path, after

Re: [4.9.13] brcmf use-after-free on resume

2017-03-06 Thread Arend Van Spriel
+ linux-wireless On 6-3-2017 8:04, Daniel J Blueman wrote: > When resuming from suspend with a BCM43602 on Ubuntu 16.04 with > 4.9.13, we see use after free [1]. > > We see the struct cfg80211_ops is accessed in the resume path, after > it was previously freed: > > (gdb) list *(brcmf_cfg80211_at

[4.9.13] brcmf use-after-free on resume

2017-03-05 Thread Daniel J Blueman
When resuming from suspend with a BCM43602 on Ubuntu 16.04 with 4.9.13, we see use after free [1]. We see the struct cfg80211_ops is accessed in the resume path, after it was previously freed: (gdb) list *(brcmf_cfg80211_attach+0x10b) 0x1d77b is in brcmf_cfg80211_attach (drivers/net/wireless/broa