Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0bc6b187 authored by Sujith's avatar Sujith Committed by John W. Linville
Browse files

mac80211: Fix panic in aggregation handling 



Not assigning the vif pointer causes an oops.
This patch fixes it.

Signed-off-by: default avatarSujith <Sujith.Manoharan@atheros.com>
Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
parent 24b6b15f

net/mac80211/agg-tx.c

+2 −0
Original line number Diff line number Diff line
@@ -489,6 +489,7 @@ void ieee80211_start_tx_ba_cb_irqsafe(struct ieee80211_vif *vif, 
	ra_tid = (struct ieee80211_ra_tid *) &skb->cb;

	memcpy(&ra_tid->ra, ra, ETH_ALEN);

	ra_tid->tid = tid;

	ra_tid->vif = vif;



	skb->pkt_type = IEEE80211_ADDBA_MSG;

	skb_queue_tail(&local->skb_queue, skb);
@@ -625,6 +626,7 @@ void ieee80211_stop_tx_ba_cb_irqsafe(struct ieee80211_vif *vif, 
	ra_tid = (struct ieee80211_ra_tid *) &skb->cb;

	memcpy(&ra_tid->ra, ra, ETH_ALEN);

	ra_tid->tid = tid;

	ra_tid->vif = vif;



	skb->pkt_type = IEEE80211_DELBA_MSG;

	skb_queue_tail(&local->skb_queue, skb);