Commit 010bfbe7 authored by Johannes Berg's avatar Johannes Berg
Browse files

cfg80211: scan: drop entry from hidden_list on overflow 



If we overflow the maximum number of BSS entries and free the
new entry, drop it from any hidden_list that it may have been
added to in the code above or in cfg80211_combine_bsses().

Reported-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20210416094212.5de7d1676ad7.Ied283b0bc5f504845e7d6ab90626bdfa68bb3dc0@changeid


Cc: stable@vger.kernel.org
Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
parent 2f516444

net/wireless/scan.c

+2 −0
Original line number Diff line number Diff line
@@ -1751,6 +1751,8 @@ cfg80211_bss_update(struct cfg80211_registered_device *rdev, 


		if (rdev->bss_entries >= bss_entries_limit &&

		    !cfg80211_bss_expire_oldest(rdev)) {

			if (!list_empty(&new->hidden_list))

				list_del(&new->hidden_list);

			kfree(new);

			goto drop;

		}