mac80211: fix rcu-unsafe pointer dereference
authorChristian Lamparter <chunkeey@googlemail.com>
Tue, 24 Aug 2010 17:22:42 +0000 (19:22 +0200)
committerJohn W. Linville <linville@tuxdriver.com>
Wed, 25 Aug 2010 18:34:56 +0000 (14:34 -0400)
commit2c15a0cf27a74213a714cc7be31685b841f7c1ac
tree7d2e0bcf9b3c04922ddce91e4641eeed4387c11f
parent74b70a4e38d542843fccfb367dce1ac861cc3890
mac80211: fix rcu-unsafe pointer dereference

This patch fixes a potential crash (null-pointer de-
reference) which was introduced in my previous patch:
 "mac80211: AMPDU rx reorder timeout timer"

During a BA teardown, the pointer to the soon-to-be-gone
tid_ampdu_rx element will be nullified. Therefore the
release timer mechanism has to be careful not to
accidentally access the item without any RCU protection.

Signed-off-by: Christian Lamparter <chunkeey@googlemail.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
net/mac80211/rx.c