diff options
| author | Felix Fietkau <nbd@openwrt.org> | 2012-06-14 21:04:53 -0400 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2012-06-19 14:56:24 -0400 |
| commit | 80b08a8d8829a58b5db14b1417151094cc28face (patch) | |
| tree | 69a5f0c17529b1c3fda8344a65a7a6de86754264 /drivers/net/wireless/ath/ath9k/ath9k.h | |
| parent | 76591bea9714a58d8924154068c78d702eb2cb17 (diff) | |
ath9k: fix invalid pointer access in the tx path
After setup_frame_info has been called, only info->control.rates is still
valid, other control fields have been overwritten by the ath_frame_info
data. Move the access to info->control.vif for checking short preamble
to setup_frame_info before it gets overwritten.
This regression was introduced in commit d47a61aa
"ath9k: Fix multi-VIF BSS handling"
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Reported-by: Thomas Hühn <thomas@net.t-labs.tu-berlin.de>
Acked-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
Cc: stable@vger.kernel.org [3.4]
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'drivers/net/wireless/ath/ath9k/ath9k.h')
| -rw-r--r-- | drivers/net/wireless/ath/ath9k/ath9k.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/net/wireless/ath/ath9k/ath9k.h b/drivers/net/wireless/ath/ath9k/ath9k.h index a277cf6f339d..4866550ddd96 100644 --- a/drivers/net/wireless/ath/ath9k/ath9k.h +++ b/drivers/net/wireless/ath/ath9k/ath9k.h | |||
| @@ -214,6 +214,7 @@ struct ath_frame_info { | |||
| 214 | enum ath9k_key_type keytype; | 214 | enum ath9k_key_type keytype; |
| 215 | u8 keyix; | 215 | u8 keyix; |
| 216 | u8 retries; | 216 | u8 retries; |
| 217 | u8 rtscts_rate; | ||
| 217 | }; | 218 | }; |
| 218 | 219 | ||
| 219 | struct ath_buf_state { | 220 | struct ath_buf_state { |