projects
/
openwrt
/
staging
/
blogic.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
a1e567c
)
mac80211: Fix dangling pointer in ieee80211_xmit
author
Steve deRosier
<steve@cozybit.com>
Sun, 12 Sep 2010 03:01:31 +0000
(20:01 -0700)
committer
John W. Linville
<linville@tuxdriver.com>
Tue, 14 Sep 2010 20:08:03 +0000
(16:08 -0400)
hdr pointer is left dangling after call to ieee80211_skb_resize. This
can cause guards around mesh path selection to fail.
Signed-off-by: Steve deRosier <steve@cozybit.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
net/mac80211/tx.c
patch
|
blob
|
history
diff --git
a/net/mac80211/tx.c
b/net/mac80211/tx.c
index ccf373788ce9929dc2599034f4db310d1f9ed324..e1733dcb58a73025ba609b2a9919524ec2dd51c0 100644
(file)
--- a/
net/mac80211/tx.c
+++ b/
net/mac80211/tx.c
@@
-1609,6
+1609,7
@@
static void ieee80211_xmit(struct ieee80211_sub_if_data *sdata,
return;
}
+ hdr = (struct ieee80211_hdr *) skb->data;
info->control.vif = &sdata->vif;
if (ieee80211_vif_is_mesh(&sdata->vif) &&