mac80211: Fix dangling pointer in ieee80211_xmit
authorSteve deRosier <steve@cozybit.com>
Sun, 12 Sep 2010 03:01:31 +0000 (20:01 -0700)
committerJohn W. Linville <linville@tuxdriver.com>
Tue, 14 Sep 2010 20:08:03 +0000 (16:08 -0400)
hdr pointer is left dangling after call to ieee80211_skb_resize. This
can cause guards around mesh path selection to fail.

Signed-off-by: Steve deRosier <steve@cozybit.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
net/mac80211/tx.c

index ccf3737..e1733dc 100644 (file)
@@ -1609,6 +1609,7 @@ static void ieee80211_xmit(struct ieee80211_sub_if_data *sdata,
                return;
        }
 
+       hdr = (struct ieee80211_hdr *) skb->data;
        info->control.vif = &sdata->vif;
 
        if (ieee80211_vif_is_mesh(&sdata->vif) &&