CVSROOT: /cvs Module name: src Changes by: s...@cvs.openbsd.org 2017/08/12 09:10:27
Modified files: sys/dev/pci : if_iwm.c Log message: Prevent a NULL pointer deref in iwm(4) which I have seen during testing. iwm_stop() sets the phy context pointer in the ic_bss node to NULL. If iwm_stop() runs in parallel to the newstate task, the newstate task can dereference this pointer in iwn_update_quotas() or iwm_binding_cmd(). So check the pointer for NULL before derefencing. This is a quick and dirty workaround. A proper fix for such task races is still pending.