diff options
| author | Steve deRosier <steve@cozybit.com> | 2010-09-11 20:01:31 -0700 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2010-09-14 16:08:03 -0400 |
| commit | 740c1aa3b01251c3c324743f395621749b099065 (patch) | |
| tree | 9fe20602ca607b45a93a4d3a595f48456ac7232d /net/mac80211/tx.c | |
| parent | a1e567c83f541432e687142570215b75bebb1338 (diff) | |
| download | linux-3.10-740c1aa3b01251c3c324743f395621749b099065.tar.gz linux-3.10-740c1aa3b01251c3c324743f395621749b099065.tar.bz2 linux-3.10-740c1aa3b01251c3c324743f395621749b099065.zip | |
mac80211: Fix dangling pointer in ieee80211_xmit
hdr pointer is left dangling after call to ieee80211_skb_resize. This
can cause guards around mesh path selection to fail.
Signed-off-by: Steve deRosier <steve@cozybit.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'net/mac80211/tx.c')
| -rw-r--r-- | net/mac80211/tx.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/mac80211/tx.c b/net/mac80211/tx.c index ccf373788ce..e1733dcb58a 100644 --- a/net/mac80211/tx.c +++ b/net/mac80211/tx.c @@ -1609,6 +1609,7 @@ static void ieee80211_xmit(struct ieee80211_sub_if_data *sdata, return; } + hdr = (struct ieee80211_hdr *) skb->data; info->control.vif = &sdata->vif; if (ieee80211_vif_is_mesh(&sdata->vif) && |