Johannes Berg
44271488b9
mac80211: delete AddBA response timer ...
We never delete the addBA response timer, which
is typically fine, but if the station it belongs
to is deleted very quickly after starting the BA
session, before the peer had a chance to reply,
the timer may fire after the station struct has
been freed already. Therefore, we need to delete
the timer in a suitable spot -- best when the
session is being stopped (which will happen even
then) in which case the delete will be a no-op
most of the time.
I've reproduced the scenario and tested the fix.
This fixes the crash reported at
http://mid.gmane.org/4CAB6F96.6090701@candelatech.com
Cc: stable@kernel.org
Reported-by: Ben Greear <greearb@candelatech.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2010-10-06 15:58:29 -04:00
fs/9p: destroy fid on failed remove
2010-08-02 14:28:36 -05:00
vlan_dev: VLAN 0 should be treated as "no vlan tag" (802.1p packet)
2010-07-18 15:38:44 -07:00
ppp: make channel_ops const
2010-08-04 21:53:17 -07:00
Bluetooth: Fix incorrect setting of remote_tx_win for L2CAP ERTM
2010-08-10 07:59:11 -04:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2010-08-02 22:22:46 -07:00
caif: precedence bug
2010-07-22 14:14:47 -07:00
can-raw: Fix skb_orphan_try handling
2010-08-03 00:31:48 -07:00
net: disable preemption before call smp_processor_id()
2010-08-07 20:35:43 -07:00
net: dccp: fix sign bug
2010-07-18 15:07:14 -07:00
net-next: remove useless union keyword
2010-06-10 23:31:35 -07:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2010-07-20 18:25:24 -07:00
econet: fix locking
2010-06-11 18:37:08 -07:00
Net: ethernet: pe2.c: fix EXPORT_SYMBOL macro code style issue
2010-07-14 18:27:09 -07:00
ieee802154: Fix possible NULL pointer dereference in wpan_phy_alloc
2010-05-23 23:11:07 -07:00
tcp: no md5sig option size check bug
2010-08-07 20:24:28 -07:00
Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial
2010-08-04 15:31:02 -07:00
ppp: make channel_ops const
2010-08-04 21:53:17 -07:00
net: use __packed annotation
2010-06-03 03:21:52 -07:00
pfkey: add severity to printk
2010-05-17 23:23:13 -07:00
ppp: make channel_ops const
2010-08-04 21:53:17 -07:00
mac80211: delete AddBA response timer
2010-10-06 15:58:29 -04:00
Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial
2010-08-04 15:31:02 -07:00
net: Remove unnecessary returns from void function()s
2010-05-17 23:23:14 -07:00
genetlink: use genl_register_family_with_ops()
2010-07-26 21:00:10 -07:00
packet_mmap: expose hw packet timestamps to network packet capture utilities
2010-06-02 05:53:56 -07:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2010-07-20 18:25:24 -07:00
net/rds: Add missing mutex_unlock
2010-05-29 00:18:48 -07:00
net/rose: Use GFP_ATOMIC
2010-08-01 00:32:12 -07:00
RxRPC: Fix a potential deadlock between the call resend_timer and state_lock
2010-08-04 21:53:16 -07:00
pkt_sched: Fix sch_sfq vs tcf_bind_filter oops
2010-08-07 22:45:41 -07:00
Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial
2010-08-04 15:31:02 -07:00
mm: add context argument to shrinker callback to remaining shrinkers
2010-07-21 15:33:01 +10:00
drop_monitor: convert some kfree_skb call sites to consume_skb
2010-07-20 13:28:05 -07:00
net: autoconvert trivial BKL users to private mutex
2010-07-12 20:21:47 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6
2010-05-20 21:04:44 -07:00
wext: fix potential private ioctl memory content leak
2010-09-20 13:41:40 -04:00
X25: Remove bkl in sockopts
2010-05-17 17:39:28 -07:00
Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6
2010-07-20 18:25:24 -07:00
From abbffa2aa9bd6f8df16d0d0a102af677510d8b9a Mon Sep 17 00:00:00 2001
2010-06-03 20:03:40 -07:00
wireless: Make COMPAT_NETLINK_MESSAGES depend upon WEXT_CORE
2010-07-26 13:13:49 -07:00
net/Makefile: conditionally descend to wireless and ieee802154
2010-06-29 15:32:43 -07:00
net: support time stamping in phy devices.
2010-07-18 19:15:26 -07:00
net: Remove unnecessary returns from void function()s
2010-05-17 23:23:14 -07:00
44271488b9