Jouni Malinen 055249d20d mac80211: Fix panic on fragmentation with power saving
It was possible to hit a kernel panic on NULL pointer dereference in
dev_queue_xmit() when sending power save buffered frames to a STA that
woke up from sleep. This happened when the buffered frame was requeued
for transmission in ap_sta_ps_end(). In order to avoid the panic, copy
the skb->dev and skb->iif values from the first fragment to all other
fragments.

Signed-off-by: Jouni Malinen <jouni.malinen@atheros.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2009-03-16 18:01:59 -04:00
..
2007-05-05 11:46:38 -07:00
2008-04-08 16:44:45 -04:00
2008-04-08 16:44:45 -04:00
2008-12-19 15:24:00 -05:00
2009-01-22 13:55:01 -05:00
2008-10-31 19:00:37 -04:00
2008-09-11 15:53:39 -04:00
2009-01-16 17:08:23 -05:00
2008-12-19 15:23:59 -05:00
2008-10-31 18:05:59 -04:00
2008-12-19 15:24:00 -05:00
2008-10-31 19:02:14 -04:00
2008-09-15 16:48:22 -04:00
2008-10-31 18:05:59 -04:00
2008-03-06 15:30:46 -05:00