| commit | 1bad53824305807bb5cf49d6b588dd9d867586c6 | [log] [tgz] |
|---|---|---|
| author | Felix Fietkau <nbd@openwrt.org> | Sat Sep 08 11:58:30 2012 +0200 |
| committer | Johannes Berg <johannes.berg@intel.com> | Mon Sep 10 18:44:58 2012 +0200 |
| tree | 55f046a4d3c0eec4f2f16b18b586c5e245921a03 | |
| parent | b22cfcfcae5b2c1e9b43543b6a23e5ef517de8f8 [diff] |
mac80211: validate skb->dev in the tx status path skb->dev might contain a stale reference to a device that was already deleted, and using it unchecked can lead to invalid pointer accesses. Since this is only used for nl80211 tx, iterate over active interfaces to find a match for skb->dev, and discard the tx status if the device is gone. Signed-off-by: Felix Fietkau <nbd@openwrt.org> Signed-off-by: Johannes Berg <johannes.berg@intel.com>