提交 3f606c4e 编写于 作者: J Johannes Berg 提交者: Zheng Zengkai

wifi: mac80211_hwsim: use 32-bit skb cookie

stable inclusion
from stable-v5.10.137
commit 6dece5ad6e1e7d8c2bacfae606dc6f18a18c51e0
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I60PLB

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6dece5ad6e1e7d8c2bacfae606dc6f18a18c51e0

--------------------------------

commit cc5250cd upstream.

We won't really have enough skbs to need a 64-bit cookie,
and on 32-bit platforms storing the 64-bit cookie into the
void *rate_driver_data doesn't work anyway. Switch back to
using just a 32-bit cookie and uintptr_t for the type to
avoid compiler warnings about all this.

Fixes: 4ee186fa ("wifi: mac80211_hwsim: fix race condition in pending packet")
Signed-off-by: NJohannes Berg <johannes.berg@intel.com>
Cc: Jeongik Cha <jeongik@google.com>
Signed-off-by: NGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: NZheng Zengkai <zhengzengkai@huawei.com>
Reviewed-by: NWei Li <liwei391@huawei.com>
上级 2da82e71
...@@ -593,7 +593,7 @@ struct mac80211_hwsim_data { ...@@ -593,7 +593,7 @@ struct mac80211_hwsim_data {
bool ps_poll_pending; bool ps_poll_pending;
struct dentry *debugfs; struct dentry *debugfs;
atomic64_t pending_cookie; atomic_t pending_cookie;
struct sk_buff_head pending; /* packets pending */ struct sk_buff_head pending; /* packets pending */
/* /*
* Only radios in the same group can communicate together (the * Only radios in the same group can communicate together (the
...@@ -1200,7 +1200,7 @@ static void mac80211_hwsim_tx_frame_nl(struct ieee80211_hw *hw, ...@@ -1200,7 +1200,7 @@ static void mac80211_hwsim_tx_frame_nl(struct ieee80211_hw *hw,
int i; int i;
struct hwsim_tx_rate tx_attempts[IEEE80211_TX_MAX_RATES]; struct hwsim_tx_rate tx_attempts[IEEE80211_TX_MAX_RATES];
struct hwsim_tx_rate_flag tx_attempts_flags[IEEE80211_TX_MAX_RATES]; struct hwsim_tx_rate_flag tx_attempts_flags[IEEE80211_TX_MAX_RATES];
u64 cookie; uintptr_t cookie;
if (data->ps != PS_DISABLED) if (data->ps != PS_DISABLED)
hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM); hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM);
...@@ -1269,7 +1269,7 @@ static void mac80211_hwsim_tx_frame_nl(struct ieee80211_hw *hw, ...@@ -1269,7 +1269,7 @@ static void mac80211_hwsim_tx_frame_nl(struct ieee80211_hw *hw,
goto nla_put_failure; goto nla_put_failure;
/* We create a cookie to identify this skb */ /* We create a cookie to identify this skb */
cookie = (u64)atomic64_inc_return(&data->pending_cookie); cookie = atomic_inc_return(&data->pending_cookie);
info->rate_driver_data[0] = (void *)cookie; info->rate_driver_data[0] = (void *)cookie;
if (nla_put_u64_64bit(skb, HWSIM_ATTR_COOKIE, cookie, HWSIM_ATTR_PAD)) if (nla_put_u64_64bit(skb, HWSIM_ATTR_COOKIE, cookie, HWSIM_ATTR_PAD))
goto nla_put_failure; goto nla_put_failure;
...@@ -3537,10 +3537,10 @@ static int hwsim_tx_info_frame_received_nl(struct sk_buff *skb_2, ...@@ -3537,10 +3537,10 @@ static int hwsim_tx_info_frame_received_nl(struct sk_buff *skb_2,
/* look for the skb matching the cookie passed back from user */ /* look for the skb matching the cookie passed back from user */
spin_lock_irqsave(&data2->pending.lock, flags); spin_lock_irqsave(&data2->pending.lock, flags);
skb_queue_walk_safe(&data2->pending, skb, tmp) { skb_queue_walk_safe(&data2->pending, skb, tmp) {
u64 skb_cookie; uintptr_t skb_cookie;
txi = IEEE80211_SKB_CB(skb); txi = IEEE80211_SKB_CB(skb);
skb_cookie = (u64)(uintptr_t)txi->rate_driver_data[0]; skb_cookie = (uintptr_t)txi->rate_driver_data[0];
if (skb_cookie == ret_skb_cookie) { if (skb_cookie == ret_skb_cookie) {
__skb_unlink(skb, &data2->pending); __skb_unlink(skb, &data2->pending);
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册