diff options
| author | Jouni Malinen <j@w1.fi> | 2009-03-13 12:59:39 +0100 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2009-03-16 23:01:59 +0100 |
| commit | 055249d20de06c290fe7625be0a7164bef3958f5 (patch) | |
| tree | 01e03e8e32022dc01400f51befb8c843f4ea1bad /net/can | |
| parent | ath9k: AR9280 PCI devices must serialize IO as well (diff) | |
| download | linux-055249d20de06c290fe7625be0a7164bef3958f5.tar.xz linux-055249d20de06c290fe7625be0a7164bef3958f5.zip | |
mac80211: Fix panic on fragmentation with power saving
It was possible to hit a kernel panic on NULL pointer dereference in
dev_queue_xmit() when sending power save buffered frames to a STA that
woke up from sleep. This happened when the buffered frame was requeued
for transmission in ap_sta_ps_end(). In order to avoid the panic, copy
the skb->dev and skb->iif values from the first fragment to all other
fragments.
Signed-off-by: Jouni Malinen <jouni.malinen@atheros.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'net/can')
0 files changed, 0 insertions, 0 deletions