linux/drivers/net/wireless/iwlegacy
Stanislaw Gruszka 069f40fc07 iwl4965: fix skb usage after free
Since

commit a120e912eb
Author: Stanislaw Gruszka <sgruszka@redhat.com>
Date:   Fri Feb 19 15:47:33 2010 -0800

    iwlwifi: sanity check before counting number of tfds can be free

we use skb->data after calling ieee80211_tx_status_irqsafe(), which
could free skb instantly.

On current kernels I do not observe practical problems related with
bug, but on 2.6.35.y it cause random system hangs when stressing
wireless link, making bisection of other problems impossible.

Signed-off-by: Stanislaw Gruszka <sgruszka@redhat.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2011-04-20 16:05:59 -04:00
..
iwl3945-base.c iwlegacy: fix tx_power initialization 2011-04-13 15:09:53 -04:00
iwl4965-base.c iwlegacy: fix tx_power initialization 2011-04-13 15:09:53 -04:00
iwl-3945-debugfs.c
iwl-3945-debugfs.h
iwl-3945-fh.h
iwl-3945-hw.h iwlegacy: fix tx_power initialization 2011-04-13 15:09:53 -04:00
iwl-3945-led.c
iwl-3945-led.h
iwl-3945-rs.c
iwl-3945.c
iwl-3945.h
iwl-4965-calib.c
iwl-4965-calib.h
iwl-4965-debugfs.c
iwl-4965-debugfs.h
iwl-4965-eeprom.c
iwl-4965-hw.h iwlegacy: fix tx_power initialization 2011-04-13 15:09:53 -04:00
iwl-4965-led.c
iwl-4965-led.h
iwl-4965-lib.c
iwl-4965-rs.c
iwl-4965-rx.c
iwl-4965-sta.c
iwl-4965-tx.c iwl4965: fix skb usage after free 2011-04-20 16:05:59 -04:00
iwl-4965-ucode.c
iwl-4965.c
iwl-4965.h
iwl-commands.h
iwl-core.c iwlegacy: fix tx_power initialization 2011-04-13 15:09:53 -04:00
iwl-core.h
iwl-csr.h
iwl-debug.h
iwl-debugfs.c
iwl-dev.h
iwl-devtrace.c
iwl-devtrace.h
iwl-eeprom.c iwlegacy: fix tx_power initialization 2011-04-13 15:09:53 -04:00
iwl-eeprom.h
iwl-fh.h
iwl-hcmd.c
iwl-helpers.h
iwl-io.h
iwl-led.c
iwl-led.h
iwl-legacy-rs.h
iwl-power.c
iwl-power.h
iwl-prph.h
iwl-rx.c
iwl-scan.c
iwl-spectrum.h
iwl-sta.c
iwl-sta.h
iwl-tx.c
Kconfig iwlegacy: make iwl3945 and iwl4965 select IWLWIFI_LEGACY 2011-04-11 13:56:07 -04:00
Makefile