]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 856142c) | patch
mac80211: fix mgmt-tx abort cookie and leak
authorJohannes Berg <johannes.berg@intel.com>
Tue, 24 Nov 2015 19:28:27 +0000 (20:28 +0100)
committerJohannes Berg <johannes.berg@intel.com>
Fri, 4 Dec 2015 13:43:32 +0000 (14:43 +0100)
commite673a65952b4ab045a3e3eb200fdf408004fb4fd
tree7a6a39d644b63949cc7adc18342d12fd309c0b7etree | snapshot
parent856142cdaa483099f50cac70a16898ead8e4094dcommit | diff
mac80211: fix mgmt-tx abort cookie and leak

If a mgmt-tx operation is aborted before it runs, the wrong
cookie is reported back to userspace, and the ack_skb gets
leaked since the frame is freed directly instead of freeing
it using ieee80211_free_txskb(). Fix that.

Fixes: 3b79af973cf4 ("mac80211: stop using pointers as userspace cookies")
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/mac80211/offchannel.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git