diff options
-rw-r--r-- | net/mac80211/rx.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/net/mac80211/rx.c b/net/mac80211/rx.c index c6bfd4019d44..a0ca27aeb732 100644 --- a/net/mac80211/rx.c +++ b/net/mac80211/rx.c | |||
@@ -2077,6 +2077,7 @@ ieee80211_reassemble_find(struct ieee80211_sub_if_data *sdata, | |||
2077 | idx = sdata->fragment_next; | 2077 | idx = sdata->fragment_next; |
2078 | for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++) { | 2078 | for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++) { |
2079 | struct ieee80211_hdr *f_hdr; | 2079 | struct ieee80211_hdr *f_hdr; |
2080 | struct sk_buff *f_skb; | ||
2080 | 2081 | ||
2081 | idx--; | 2082 | idx--; |
2082 | if (idx < 0) | 2083 | if (idx < 0) |
@@ -2088,7 +2089,8 @@ ieee80211_reassemble_find(struct ieee80211_sub_if_data *sdata, | |||
2088 | entry->last_frag + 1 != frag) | 2089 | entry->last_frag + 1 != frag) |
2089 | continue; | 2090 | continue; |
2090 | 2091 | ||
2091 | f_hdr = (struct ieee80211_hdr *)entry->skb_list.next->data; | 2092 | f_skb = __skb_peek(&entry->skb_list); |
2093 | f_hdr = (struct ieee80211_hdr *) f_skb->data; | ||
2092 | 2094 | ||
2093 | /* | 2095 | /* |
2094 | * Check ftype and addresses are equal, else check next fragment | 2096 | * Check ftype and addresses are equal, else check next fragment |