android_kernel_motorola_sm6225/drivers/net/wireless/p54
Christian Lamparter 390fd9d6c2 p54: fix off-by-one null pointer bug in p54_tx_80211
This patch fixes a regression which was introduced in:
"mac80211: move TX station pointer and restructure TX"

IP: p54_tx_80211+0x21/0x513 [p54common]
Oops: 0000 [#1] SMP
Modules linked in: p54usb p54common [...]
Pid: 13394, comm: hostapd 3.6.0-rc4-wl+
RIP: 0010:p54_tx_80211+0x21/0x513
RSP: 0018:...  EFLAGS: 00010292
[...]
Process hostapd
Stack:
[...]
Call Trace:
p54_bss_info_changed+0x204/0x21e [p54common]
ieee80211_del_station+0x16/0x32 [mac80211]
ieee80211_start_ap+0x10f/0x157 [mac80211]
nl80211_start_ap+0x315/0x361 [cfg80211]

p54_tx_80211 function is called as part of the
beacon update. The caller p54_bss_info_changed
has to supply a valid tx control struct, or
the control->sta will lead to a null pointer
dereference.

Signed-off-by: Christian Lamparter <chunkeey@googlemail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2012-09-11 15:13:54 -04:00
..
eeprom.c p54: fix powerpc gcc warnings 2012-08-13 15:28:35 -04:00
eeprom.h p54: parse output power table 2012-08-10 15:17:14 -04:00
fwio.c wireless: Remove casts to same type 2012-06-06 09:31:33 -07:00
Kconfig p54spi: Update kconfig help text 2011-03-07 13:51:04 -05:00
led.c drivers/net/wireless: Restore upper case words in wiphy_<level> messages 2010-08-18 16:37:44 -04:00
lmac.h mac80211: move TX station pointer and restructure TX 2012-07-31 16:18:39 +02:00
main.c p54: fix off-by-one null pointer bug in p54_tx_80211 2012-09-11 15:13:54 -04:00
Makefile
net2280.h drivers/net: use __packed annotation 2010-06-03 03:18:23 -07:00
p54.h p54: only unregister ieee80211_hw when it has been registered 2012-04-09 16:07:35 -04:00
p54pci.c p54pci: convert driver to use asynchronous firmware loading 2012-08-06 14:56:33 -04:00
p54pci.h p54pci: convert driver to use asynchronous firmware loading 2012-08-06 14:56:33 -04:00
p54spi.c p54spi: Release GPIO lines and IRQ on error in p54spi_probe 2012-03-05 15:23:17 -05:00
p54spi.h drivers/net: use __packed annotation 2010-06-03 03:18:23 -07:00
p54spi_eeprom.h p54spi: update sample eeprom 2011-02-14 15:52:10 -05:00
p54usb.c USB 3.5-rc1 pull request 2012-05-22 15:50:46 -07:00
p54usb.h p54usb: Load firmware asynchronously 2012-04-09 16:07:35 -04:00
txrx.c mac80211: move TX station pointer and restructure TX 2012-07-31 16:18:39 +02:00