mirror of https://github.com/hak5/openwrt-owl.git
broadcom-wl: fix memory corruption and leakage on remove (patch from #9576 by George Kashperko)
SVN-Revision: 27348owl
parent
0a7a73261a
commit
b8b060d2fe
|
@ -0,0 +1,31 @@
|
||||||
|
From: George Kashperko <george@znau.edu.ua>
|
||||||
|
|
||||||
|
Release nvram variables buffer.
|
||||||
|
Prevent block reserved by alloc_etherdev from being freed.
|
||||||
|
Signed-off-by: George Kashperko <george@znau.edu.ua>
|
||||||
|
---
|
||||||
|
---
|
||||||
|
--- a/driver/siutils.c
|
||||||
|
+++ b/driver/siutils.c
|
||||||
|
@@ -647,7 +647,10 @@ si_detach(si_t *sih)
|
||||||
|
#if !defined(BCMBUSTYPE) || (BCMBUSTYPE == SI_BUS)
|
||||||
|
if (sii != &ksii)
|
||||||
|
#endif /* !BCMBUSTYPE || (BCMBUSTYPE == SI_BUS) */
|
||||||
|
- MFREE(sii->osh, sii, sizeof(si_info_t));
|
||||||
|
+ do {
|
||||||
|
+ MFREE(sii->osh, sii, sizeof(si_info_t));
|
||||||
|
+ nvram_exit((void *)&(sii->pub));
|
||||||
|
+ } while (0);
|
||||||
|
}
|
||||||
|
|
||||||
|
void *
|
||||||
|
--- a/driver/wl_linux.c
|
||||||
|
+++ b/driver/wl_linux.c
|
||||||
|
@@ -1477,7 +1477,6 @@ wl_free_if(wl_info_t *wl, wl_if_t *wlif)
|
||||||
|
free_netdev(wlif->dev);
|
||||||
|
#endif
|
||||||
|
}
|
||||||
|
- MFREE(wl->osh, wlif, sizeof(wl_if_t));
|
||||||
|
}
|
||||||
|
|
||||||
|
#ifdef AP
|
Loading…
Reference in New Issue