From: Felix Fietkau <nbd@nbd.name>
Date: Thu, 25 Oct 2018 12:23:13 +0000 (+0200)
Subject: mt76: mt76x02: skip station tx status for non-sta wcid entries
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=65b526a108264aeac769ec82cf33e5f966c9a1df;p=openwrt%2Fstaging%2Fblogic.git

mt76: mt76x02: skip station tx status for non-sta wcid entries

Fixes a crash that could occur if a frame is sent to a station, but the
station's wcid was not used (e.g. for software encrypted mgmt tx)

Signed-off-by: Felix Fietkau <nbd@nbd.name>
---

diff --git a/drivers/net/wireless/mediatek/mt76/mt76x02_mac.c b/drivers/net/wireless/mediatek/mt76/mt76x02_mac.c
index 34fc9f2eb51f..ad8df680c6a5 100644
--- a/drivers/net/wireless/mediatek/mt76/mt76x02_mac.c
+++ b/drivers/net/wireless/mediatek/mt76/mt76x02_mac.c
@@ -450,7 +450,7 @@ void mt76x02_send_tx_status(struct mt76x02_dev *dev,
 	if (stat->wcid < ARRAY_SIZE(dev->mt76.wcid))
 		wcid = rcu_dereference(dev->mt76.wcid[stat->wcid]);
 
-	if (wcid) {
+	if (wcid && wcid->sta) {
 		void *priv;
 
 		priv = msta = container_of(wcid, struct mt76x02_sta, wcid);