git.baikalelectronics.ru Git - kernel.git/commit

author	Stanislaw Gruszka <sgruszka@redhat.com>
	Wed, 20 Apr 2011 13:57:14 +0000 (15:57 +0200)
committer	John W. Linville <linville@tuxdriver.com>
	Wed, 20 Apr 2011 20:05:59 +0000 (16:05 -0400)
commit	aa065497e36d4b6c43960acfae44af4abd7851d1
tree	db9972ab6095d6bd57978d734810e26c733338ee	tree \| snapshot
parent	9501832ec22d0266eb49b6b685bc80d32e54da00	commit \| diff

iwlwifi: fix skb usage after free

Since

commit c6f0a40d7cd986f870eb0fda707c5b507a2e27c4
Author: Stanislaw Gruszka <sgruszka@redhat.com>
Date: Fri Feb 19 15:47:33 2010 -0800

iwlwifi: sanity check before counting number of tfds can be free

we use skb->data after calling ieee80211_tx_status_irqsafe(), which
could free skb instantly.

On current kernels I do not observe practical problems related with
bug, but on 2.6.35.y it cause random system hangs when stressing
wireless link.

Cc: stable@kernel.org # 2.6.32+
Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
Acked-by: Wey-Yi Guy <wey-yi.w.guy@intel.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>