diff options
| author | Felix Fietkau <nbd@openwrt.org> | 2012-09-08 11:58:30 +0200 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2012-09-10 18:44:58 +0200 |
| commit | 1bad53824305807bb5cf49d6b588dd9d867586c6 (patch) | |
| tree | 55f046a4d3c0eec4f2f16b18b586c5e245921a03 /net/mac80211/ieee80211_i.h | |
| parent | mac80211: use call_rcu() on sta deletion (diff) | |
| download | linux-1bad53824305807bb5cf49d6b588dd9d867586c6.tar.xz linux-1bad53824305807bb5cf49d6b588dd9d867586c6.zip | |
mac80211: validate skb->dev in the tx status path
skb->dev might contain a stale reference to a device that was already
deleted, and using it unchecked can lead to invalid pointer accesses.
Since this is only used for nl80211 tx, iterate over active interfaces
to find a match for skb->dev, and discard the tx status if the device
is gone.
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/mac80211/ieee80211_i.h')
0 files changed, 0 insertions, 0 deletions