diff options
| author | Johannes Berg <johannes.berg@intel.com> | 2012-11-29 01:25:20 +0100 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2012-11-30 13:42:20 +0100 |
| commit | 9caf03640279e64d0ba36539b42daa1b43a49486 (patch) | |
| tree | cb094a4a577f61421d1b402e16f0e68f151d5726 /net/wireless/reg.h | |
| parent | b9a9ada14aab17f08c1d9735601f1097cdcfc6de (diff) | |
| download | linux-3.10-9caf03640279e64d0ba36539b42daa1b43a49486.tar.gz linux-3.10-9caf03640279e64d0ba36539b42daa1b43a49486.tar.bz2 linux-3.10-9caf03640279e64d0ba36539b42daa1b43a49486.zip | |
cfg80211: fix BSS struct IE access races
When a BSS struct is updated, the IEs are currently
overwritten or freed. This can lead to races if some
other CPU is accessing the BSS struct and using the
IEs concurrently.
Fix this by always allocating the IEs in a new struct
that holds the data and length and protecting access
to this new struct with RCU.
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'net/wireless/reg.h')
| -rw-r--r-- | net/wireless/reg.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/wireless/reg.h b/net/wireless/reg.h index f023c8a31c6..4c0a32ffd53 100644 --- a/net/wireless/reg.h +++ b/net/wireless/reg.h @@ -81,7 +81,7 @@ int regulatory_hint_found_beacon(struct wiphy *wiphy, */ void regulatory_hint_11d(struct wiphy *wiphy, enum ieee80211_band band, - u8 *country_ie, + const u8 *country_ie, u8 country_ie_len); /** |