From nobody Wed Feb 11 00:38:10 2026 Received: from mail-lj1-f176.google.com (mail-lj1-f176.google.com [209.85.208.176]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 32A961F4611 for ; Wed, 31 Dec 2025 05:29:58 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.208.176 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1767159001; cv=none; b=FPuJ/5Yc4mcn6ETNBr8L3YHbAhElWDdqn6h1edTm9VMPslnQSEJ+E85qEt1IonMtELWoQK2XNhcZfJkg59p/BSeQbE9cwMHNUm0pGU44NpUUGwqYW+LMqowP463Vagxvi3tqYMQl6g5Mdcqkucewk5OAs6S0XUNeqPzByX0xsGM= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1767159001; c=relaxed/simple; bh=rRXfrojVXq/HBXH8iXD11cckP9+GnyngGC/+RggZXxM=; h=MIME-Version:From:Date:Message-ID:Subject:To:Cc:Content-Type; b=rQ2aq8oZa7qljwmhguEzN51Ep3ho1U2TDagB1j4RVHk4nTbBtBxKPxIoI58/imQcAvM8Q84sOZpM68GVXYwpOh/wk4FNYxpMSkNpf+DgsJuQ+Tt5v1DYlnJ8pjb+ePOLt7TJgYue+31XJK9T1jLnCGPDillzCASmBL2n5jpHpeY= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=zacbowling.com; spf=fail smtp.mailfrom=zacbowling.com; dkim=pass (2048-bit key) header.d=zacbowling-com.20230601.gappssmtp.com header.i=@zacbowling-com.20230601.gappssmtp.com header.b=WIGORIqx; arc=none smtp.client-ip=209.85.208.176 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=zacbowling.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=zacbowling.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=zacbowling-com.20230601.gappssmtp.com header.i=@zacbowling-com.20230601.gappssmtp.com header.b="WIGORIqx" Received: by mail-lj1-f176.google.com with SMTP id 38308e7fff4ca-37d056f5703so78908581fa.0 for ; Tue, 30 Dec 2025 21:29:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zacbowling-com.20230601.gappssmtp.com; s=20230601; t=1767158997; x=1767763797; darn=vger.kernel.org; h=cc:to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=sHKEzk3eiDkWr/mHmCD5Kjkc96F4fxGo9YLhfmfwt4I=; b=WIGORIqx61FQX3S5BNBA59wQUikDdTXkUJf6xkJLGQEZiRcl1yCsFX5+yXSHFsD2pS 1Jl11u4k0zzwgPXvvZJzGDI9YisjDy6YSwaafBfYwCfMDhmxAepBYDFwHawVBbh1dB9o 60p5SLtkvX53PnKyUSaTl2UOEvfWp2l4/L3haC7iMwSv8c5sNkQU0GbZxRsrVwdb1fGb rj7RJfrQ8gSDO0H2dZo+vJdDV7Qw8UPy1DCtpMxzhDDUIm7TuALvw/KkwQsQN+1qhVIu eROTgLSr0bKqMjU61i6SLtNYzQcL8jp65yM7+z6J+fM5fHhPix5Wi05AOnPu4aqTw+5L 7wvw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1767158997; x=1767763797; h=cc:to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=sHKEzk3eiDkWr/mHmCD5Kjkc96F4fxGo9YLhfmfwt4I=; b=oZYiCxXMJ2vh5jEIPC2YEkrOBiHX3fkYOjgTFtLwkpGmZEfGewE0pHwDJf53e1Djoa cNizvWmuMw7FzrzUj9PsSlPnHTpnozxOE9KDD1hUKMclIGKBzZO1yMYDBWsZU8fdNZce EBPEeXs43dfGKemHthOQpLKMDQoLiAr77GYVuvZwjvEgFmsMgaHpoFZB4Ew9FAbvy4Ts PF86OMHxsF+OHmQp1Hll0wGkjSYLxdDgGX1u5GbG4MPduaEoCz/TpAX4wfDGXk3OI/6V 1IkEvxcnMEu7c32EEp6kXKM5Jk9GqzQoj+65XgCMpQHQsHagZ8zLln4uTYx+K+0aJoen jm8Q== X-Forwarded-Encrypted: i=1; AJvYcCVcpq3Hjye7JfPofgh/z5E5awNg6Ip+hYLgBvTMqLrogUTjum61fvtkFn50DHS1CJdlZ/X+jHtkKS/lgHI=@vger.kernel.org X-Gm-Message-State: AOJu0YxF/PJhHF80YPiDBjUvdIpUEWah6onqa3Bivw1HFACrXSfKr/hN uFUhKsXB3D7x92o53eod4RVib+xZ+bVxklmh9qVwYPXlHcSLbVvt4BRclbKuoUnPS77eg7PuFb+ 7k3z0fljs5f/5EU/Rp+mFAijYkOzDF++TFauwngWT0uY1uqzQu29x9J8dgms8 X-Gm-Gg: AY/fxX6ubmiu61x+Karoior+Q/0GkT1q74L0sa9s76dVexBdNk9Knv45isAQMpyuMkW hLDFbprtpHC1FBgEcI789MidZBOPqtYUSmQTpgSOLKNHwGk/hdlZTWd4zJB3AKFOp2jpWIhTuH5 yQox0ri6FQ4eTz9euw5UC7wNwT7tjKCT5uigrnaSgZMAkB0T/U8KK6qdyoqCiDyeLIe/T+OXAik lRTzkqxZqpOjMQJkxRH/zq4fgTyxtpQ2HxEdzk4HDb5Yz3d9fQnOhNBV8V09dWvOrp0d2qXOupV uPWjsewMyBR6HPzvezX88y0zKHgT5A5yseS8 X-Google-Smtp-Source: AGHT+IGDUCXI56/dlMWNu29haOFoqFvTITaetCiiOEFP86knLXB3YNbN2QcQpknZHxUdToz96MXCmldzsEzuMZlPLJQ= X-Received: by 2002:a05:651c:550:b0:37b:9977:7e62 with SMTP id 38308e7fff4ca-3812164303bmr101593511fa.31.1767158996737; Tue, 30 Dec 2025 21:29:56 -0800 (PST) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 From: Zac Bowling Date: Tue, 30 Dec 2025 21:29:44 -0800 X-Gm-Features: AQt7F2rCJdqAr_4RJVPogHhFbL_7i8uMhusDazpEeOOcQ4vLEEocid67AfQWDFk Message-ID: Subject: [PATCH] wifi: mt76: mt7925: fix NULL pointer dereference in vif iteration loops To: linux-wireless@vger.kernel.org Cc: lorenzo@kernel.org, nbd@nbd.name, ryder.lee@mediatek.com, kvalo@kernel.org, sean.wang@mediatek.com, deren.wu@mediatek.com, linux-mediatek@lists.infradead.org, linux-kernel@vger.kernel.org Content-Type: multipart/mixed; boundary="0000000000004347a5064738c41f" Content-Transfer-Encoding: quoted-printable --0000000000004347a5064738c41f MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSB3YXMgZ2V0dGluZyBhIGtlcm5lbCBwYW5pYyBvbiBteSBuZXcgRnJhbWV3b3JrIERlc2t0b3Ag cnVubmluZwpVYnVudHUgMjUuMTAgd2l0aCB0aGlzIHNwZWNpZmljIFdJRkkgY2hpcHNldC4KCm10 NzkyeF92aWZfdG9fYnNzX2NvbmYoKSBjYW4gcmV0dXJuIE5VTEwgd2hlbiBpdGVyYXRpbmcgb3Zl ciB2YWxpZF9saW5rcwpkdXJpbmcgSFcgcmVzZXQgb3Igb3RoZXIgc3RhdGUgdHJhbnNpdGlvbnMs IGJlY2F1c2UgdGhlIGxpbmsgY29uZmlndXJhdGlvbgppbiBtYWM4MDIxMSBtYXkgbm90IGJlIHNl dCB1cCB5ZXQgZXZlbiB0aG91Z2ggdGhlIGRyaXZlcidzIHZhbGlkX2xpbmtzCmJpdG1hcCBoYXMg dGhlIGxpbmsgbWFya2VkIGFzIHZhbGlkLgoKVGhpcyBjYXVzZXMgYSBOVUxMIHBvaW50ZXIgZGVy ZWZlcmVuY2UgaW4gbXQ3Nl9jb25uYWNfbWN1X3VuaV9hZGRfZGV2KCkKd2hlbiBpdCB0cmllcyB0 byBhY2Nlc3MgYnNzX2NvbmYtPnZpZi0+dHlwZSwgYW5kIHNpbWlsYXIgY3Jhc2hlcyBpbiBvdGhl cgpmdW5jdGlvbnMgdGhhdCB1c2UgYnNzX2NvbmYgd2l0aG91dCBjaGVja2luZy4KClRoZSBjcmFz aCBtYW5pZmVzdHMgYXM6CiAgQlVHOiBrZXJuZWwgTlVMTCBwb2ludGVyIGRlcmVmZXJlbmNlLCBh ZGRyZXNzOiAwMDAwMDAwMDAwMDAwMDAwCiAgUklQOiAwMDEwOm10NzZfY29ubmFjX21jdV91bmlf YWRkX2RldisweGJhLzB4MWYwIFttdDc2X2Nvbm5hY19saWJdCiAgQ2FsbCBUcmFjZToKICAgbXQ3 OTI1X3ZpZl9jb25uZWN0X2l0ZXIrMHhjYi8weDI0MCBbbXQ3OTI1X2NvbW1vbl0KICAgX19pdGVy YXRlX2ludGVyZmFjZXMrMHg5Mi8weDEzMCBbbWFjODAyMTFdCiAgIGllZWU4MDIxMV9pdGVyYXRl X2ludGVyZmFjZXMrMHgzZC8weDYwIFttYWM4MDIxMV0KICAgbXQ3OTI1X21hY19yZXNldF93b3Jr KzB4MTA1LzB4MTkwIFttdDc5MjVfY29tbW9uXQoKQWRkIE5VTEwgY2hlY2tzIGZvciBic3NfY29u ZiBpbiBhbGwgbG9vcHMgdGhhdCBpdGVyYXRlIG92ZXIgdmFsaWRfbGlua3MKYW5kIGNhbGwgbXQ3 OTJ4X3ZpZl90b19ic3NfY29uZigpLCBza2lwcGluZyBsaW5rcyB3aGVyZSB0aGUgbWFjODAyMTEK bGluayBjb25maWd1cmF0aW9uIGlzIG5vdCB5ZXQgYXZhaWxhYmxlLgoKUmVwb3J0ZWQtYnk6IFph YyBCb3dsaW5nIDx6YWNAemFjYm93bGluZy5jb20+ClNpZ25lZC1vZmYtYnk6IFphYyBCb3dsaW5n IDx6YWNAemFjYm93bGluZy5jb20+ --0000000000004347a5064738c41f Content-Type: application/octet-stream; name="0001-wifi-mt76-mt7925-fix-NULL-pointer-dereference-in-vif.patch" Content-Disposition: attachment; filename="0001-wifi-mt76-mt7925-fix-NULL-pointer-dereference-in-vif.patch" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_mjtkmyu90 RnJvbSA2NzkwZTY1NjAzMGZiMjM1MjdhYTVjMGQ2ZWFhMjhjZTAyOTMzNWIxIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBaYWMgQm93bGluZyA8emFjQHphY2Jvd2xpbmcuY29tPgpEYXRl OiBUdWUsIDMwIERlYyAyMDI1IDIwOjMyOjU2IC0wODAwClN1YmplY3Q6IFtQQVRDSF0gd2lmaTog bXQ3NjogbXQ3OTI1OiBmaXggTlVMTCBwb2ludGVyIGRlcmVmZXJlbmNlIGluIHZpZgogaXRlcmF0 aW9uIGxvb3BzCgptdDc5MnhfdmlmX3RvX2Jzc19jb25mKCkgY2FuIHJldHVybiBOVUxMIHdoZW4g aXRlcmF0aW5nIG92ZXIgdmFsaWRfbGlua3MKZHVyaW5nIEhXIHJlc2V0IG9yIG90aGVyIHN0YXRl IHRyYW5zaXRpb25zLCBiZWNhdXNlIHRoZSBsaW5rIGNvbmZpZ3VyYXRpb24KaW4gbWFjODAyMTEg bWF5IG5vdCBiZSBzZXQgdXAgeWV0IGV2ZW4gdGhvdWdoIHRoZSBkcml2ZXIncyB2YWxpZF9saW5r cwpiaXRtYXAgaGFzIHRoZSBsaW5rIG1hcmtlZCBhcyB2YWxpZC4KClRoaXMgY2F1c2VzIGEgTlVM TCBwb2ludGVyIGRlcmVmZXJlbmNlIGluIG10NzZfY29ubmFjX21jdV91bmlfYWRkX2RldigpCndo ZW4gaXQgdHJpZXMgdG8gYWNjZXNzIGJzc19jb25mLT52aWYtPnR5cGUsIGFuZCBzaW1pbGFyIGNy YXNoZXMgaW4gb3RoZXIKZnVuY3Rpb25zIHRoYXQgdXNlIGJzc19jb25mIHdpdGhvdXQgY2hlY2tp bmcuCgpUaGUgY3Jhc2ggbWFuaWZlc3RzIGFzOgogIEJVRzoga2VybmVsIE5VTEwgcG9pbnRlciBk ZXJlZmVyZW5jZSwgYWRkcmVzczogMDAwMDAwMDAwMDAwMDAwMAogIFJJUDogMDAxMDptdDc2X2Nv bm5hY19tY3VfdW5pX2FkZF9kZXYrMHhiYS8weDFmMCBbbXQ3Nl9jb25uYWNfbGliXQogIENhbGwg VHJhY2U6CiAgIG10NzkyNV92aWZfY29ubmVjdF9pdGVyKzB4Y2IvMHgyNDAgW210NzkyNV9jb21t b25dCiAgIF9faXRlcmF0ZV9pbnRlcmZhY2VzKzB4OTIvMHgxMzAgW21hYzgwMjExXQogICBpZWVl ODAyMTFfaXRlcmF0ZV9pbnRlcmZhY2VzKzB4M2QvMHg2MCBbbWFjODAyMTFdCiAgIG10NzkyNV9t YWNfcmVzZXRfd29yaysweDEwNS8weDE5MCBbbXQ3OTI1X2NvbW1vbl0KCkFkZCBOVUxMIGNoZWNr cyBmb3IgYnNzX2NvbmYgaW4gYWxsIGxvb3BzIHRoYXQgaXRlcmF0ZSBvdmVyIHZhbGlkX2xpbmtz CmFuZCBjYWxsIG10NzkyeF92aWZfdG9fYnNzX2NvbmYoKSwgc2tpcHBpbmcgbGlua3Mgd2hlcmUg dGhlIG1hYzgwMjExCmxpbmsgY29uZmlndXJhdGlvbiBpcyBub3QgeWV0IGF2YWlsYWJsZS4KClJl cG9ydGVkLWJ5OiBaYWMgQm93bGluZyA8emFjQHphY2Jvd2xpbmcuY29tPgpTaWduZWQtb2ZmLWJ5 OiBaYWMgQm93bGluZyA8emFjQHphY2Jvd2xpbmcuY29tPgotLS0KIGRyaXZlcnMvbmV0L3dpcmVs ZXNzL21lZGlhdGVrL210NzYvbXQ3OTI1L21hYy5jICB8IDYgKysrKysrCiBkcml2ZXJzL25ldC93 aXJlbGVzcy9tZWRpYXRlay9tdDc2L210NzkyNS9tYWluLmMgfCA4ICsrKysrKysrCiAyIGZpbGVz IGNoYW5nZWQsIDE0IGluc2VydGlvbnMoKykKCmRpZmYgLS1naXQgYS9kcml2ZXJzL25ldC93aXJl bGVzcy9tZWRpYXRlay9tdDc2L210NzkyNS9tYWMuYyBiL2RyaXZlcnMvbmV0L3dpcmVsZXNzL21l ZGlhdGVrL210NzYvbXQ3OTI1L21hYy5jCmluZGV4IDg3MWI2NzEwMS4uMTg0ZWZlOGFmIDEwMDY0 NAotLS0gYS9kcml2ZXJzL25ldC93aXJlbGVzcy9tZWRpYXRlay9tdDc2L210NzkyNS9tYWMuYwor KysgYi9kcml2ZXJzL25ldC93aXJlbGVzcy9tZWRpYXRlay9tdDc2L210NzkyNS9tYWMuYwpAQCAt MTI3MSw2ICsxMjcxLDEyIEBAIG10NzkyNV92aWZfY29ubmVjdF9pdGVyKHZvaWQgKnByaXYsIHU4 ICptYWMsCiAJCWJzc19jb25mID0gbXQ3OTJ4X3ZpZl90b19ic3NfY29uZih2aWYsIGkpOwogCQlt Y29uZiA9IG10NzkyeF92aWZfdG9fbGluayhtdmlmLCBpKTsKIAorCQkvKiBTa2lwIGxpbmtzIHRo YXQgZG9uJ3QgaGF2ZSBic3NfY29uZiBzZXQgdXAgeWV0IGluIG1hYzgwMjExLgorCQkgKiBUaGlz IGNhbiBoYXBwZW4gZHVyaW5nIEhXIHJlc2V0IHdoZW4gbGluayBzdGF0ZSBpcyBpbmNvbnNpc3Rl bnQuCisJCSAqLworCQlpZiAoIWJzc19jb25mKQorCQkJY29udGludWU7CisKIAkJbXQ3Nl9jb25u YWNfbWN1X3VuaV9hZGRfZGV2KCZkZXYtPm1waHksIGJzc19jb25mLCAmbWNvbmYtPm10NzYsCiAJ CQkJCSAgICAmbXZpZi0+c3RhLmRlZmxpbmsud2NpZCwgdHJ1ZSk7CiAJCW10NzkyNV9tY3Vfc2V0 X3R4KGRldiwgYnNzX2NvbmYpOwpkaWZmIC0tZ2l0IGEvZHJpdmVycy9uZXQvd2lyZWxlc3MvbWVk aWF0ZWsvbXQ3Ni9tdDc5MjUvbWFpbi5jIGIvZHJpdmVycy9uZXQvd2lyZWxlc3MvbWVkaWF0ZWsv bXQ3Ni9tdDc5MjUvbWFpbi5jCmluZGV4IDJkMzU4YTk2Ni4uMzAwMWE2MmE4IDEwMDY0NAotLS0g YS9kcml2ZXJzL25ldC93aXJlbGVzcy9tZWRpYXRlay9tdDc2L210NzkyNS9tYWluLmMKKysrIGIv ZHJpdmVycy9uZXQvd2lyZWxlc3MvbWVkaWF0ZWsvbXQ3Ni9tdDc5MjUvbWFpbi5jCkBAIC0xMzA0 LDYgKzEzMDQsOCBAQCBtdDc5MjVfbWxvX3BtX2l0ZXIodm9pZCAqcHJpdiwgdTggKm1hYywgc3Ry dWN0IGllZWU4MDIxMV92aWYgKnZpZikKIAltdDc5MnhfbXV0ZXhfYWNxdWlyZShkZXYpOwogCWZv cl9lYWNoX3NldF9iaXQoaSwgJnZhbGlkLCBJRUVFODAyMTFfTUxEX01BWF9OVU1fTElOS1MpIHsK IAkJYnNzX2NvbmYgPSBtdDc5MnhfdmlmX3RvX2Jzc19jb25mKHZpZiwgaSk7CisJCWlmICghYnNz X2NvbmYpCisJCQljb250aW51ZTsKIAkJbXQ3OTI1X21jdV91bmlfYnNzX3BzKGRldiwgYnNzX2Nv bmYpOwogCX0KIAltdDc5MnhfbXV0ZXhfcmVsZWFzZShkZXYpOwpAQCAtMTYzMCw2ICsxNjMyLDgg QEAgc3RhdGljIHZvaWQgbXQ3OTI1X2lwdjZfYWRkcl9jaGFuZ2Uoc3RydWN0IGllZWU4MDIxMV9o dyAqaHcsCiAKIAlmb3JfZWFjaF9zZXRfYml0KGksICZ2YWxpZCwgSUVFRTgwMjExX01MRF9NQVhf TlVNX0xJTktTKSB7CiAJCWJzc19jb25mID0gbXQ3OTJ4X3ZpZl90b19ic3NfY29uZih2aWYsIGkp OworCQlpZiAoIWJzc19jb25mKQorCQkJY29udGludWU7CiAJCV9fbXQ3OTI1X2lwdjZfYWRkcl9j aGFuZ2UoaHcsIGJzc19jb25mLCBpZGV2KTsKIAl9CiB9CkBAIC0xODYxLDYgKzE4NjUsOCBAQCBz dGF0aWMgdm9pZCBtdDc5MjVfdmlmX2NmZ19jaGFuZ2VkKHN0cnVjdCBpZWVlODAyMTFfaHcgKmh3 LAogCWlmIChjaGFuZ2VkICYgQlNTX0NIQU5HRURfQVJQX0ZJTFRFUikgewogCQlmb3JfZWFjaF9z ZXRfYml0KGksICZ2YWxpZCwgSUVFRTgwMjExX01MRF9NQVhfTlVNX0xJTktTKSB7CiAJCQlic3Nf Y29uZiA9IG10NzkyeF92aWZfdG9fYnNzX2NvbmYodmlmLCBpKTsKKwkJCWlmICghYnNzX2NvbmYp CisJCQkJY29udGludWU7CiAJCQltdDc5MjVfbWN1X3VwZGF0ZV9hcnBfZmlsdGVyKCZkZXYtPm10 NzYsIGJzc19jb25mKTsKIAkJfQogCX0KQEAgLTE4NzYsNiArMTg4Miw4IEBAIHN0YXRpYyB2b2lk IG10NzkyNV92aWZfY2ZnX2NoYW5nZWQoc3RydWN0IGllZWU4MDIxMV9odyAqaHcsCiAJCQl9IGVs c2UgaWYgKG12aWYtPm1sb19wbV9zdGF0ZSA9PSBNVDc5MnhfTUxPX0NIQU5HRURfUFMpIHsKIAkJ CQlmb3JfZWFjaF9zZXRfYml0KGksICZ2YWxpZCwgSUVFRTgwMjExX01MRF9NQVhfTlVNX0xJTktT KSB7CiAJCQkJCWJzc19jb25mID0gbXQ3OTJ4X3ZpZl90b19ic3NfY29uZih2aWYsIGkpOworCQkJ CQlpZiAoIWJzc19jb25mKQorCQkJCQkJY29udGludWU7CiAJCQkJCW10NzkyNV9tY3VfdW5pX2Jz c19wcyhkZXYsIGJzc19jb25mKTsKIAkJCQl9CiAJCQl9Ci0tIAoyLjUxLjAKCg== --0000000000004347a5064738c41f--