From: Steve deRosier <steve@cozybit.com>
Date: Sun, 12 Sep 2010 03:01:31 +0000 (-0700)
Subject: mac80211: Fix dangling pointer in ieee80211_xmit
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=740c1aa3b01251c3c324743f395621749b099065;p=openwrt%2Fstaging%2Fblogic.git

mac80211: Fix dangling pointer in ieee80211_xmit

hdr pointer is left dangling after call to ieee80211_skb_resize. This
can cause guards around mesh path selection to fail.

Signed-off-by: Steve deRosier <steve@cozybit.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
---

diff --git a/net/mac80211/tx.c b/net/mac80211/tx.c
index ccf373788ce9..e1733dcb58a7 100644
--- a/net/mac80211/tx.c
+++ b/net/mac80211/tx.c
@@ -1609,6 +1609,7 @@ static void ieee80211_xmit(struct ieee80211_sub_if_data *sdata,
 		return;
 	}
 
+	hdr = (struct ieee80211_hdr *) skb->data;
 	info->control.vif = &sdata->vif;
 
 	if (ieee80211_vif_is_mesh(&sdata->vif) &&