diff options
| author | Christian Lamparter <chunkeey@googlemail.com> | 2010-08-24 13:22:42 -0400 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2010-08-25 14:34:56 -0400 |
| commit | 2c15a0cf27a74213a714cc7be31685b841f7c1ac (patch) | |
| tree | 7d2e0bcf9b3c04922ddce91e4641eeed4387c11f /net/mac80211/mesh.h | |
| parent | 74b70a4e38d542843fccfb367dce1ac861cc3890 (diff) | |
mac80211: fix rcu-unsafe pointer dereference
This patch fixes a potential crash (null-pointer de-
reference) which was introduced in my previous patch:
"mac80211: AMPDU rx reorder timeout timer"
During a BA teardown, the pointer to the soon-to-be-gone
tid_ampdu_rx element will be nullified. Therefore the
release timer mechanism has to be careful not to
accidentally access the item without any RCU protection.
Signed-off-by: Christian Lamparter <chunkeey@googlemail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'net/mac80211/mesh.h')
0 files changed, 0 insertions, 0 deletions