Commit 1c963bec authored Nov 07, 2012 by Johannes Berg

mac80211: fix TX error path



One error path in ieee80211_subif_start_xmit() will
double-free the SKB. Set it to NULL to prevent that.

This issue was introduced by my channel context
changes.

Signed-off-by: Johannes Berg <johannes.berg@intel.com>

parent 4afebd63

net/mac80211/tx.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -2089,6 +2089,7 @@ netdev_tx_t ieee80211_subif_start_xmit(struct sk_buff *skb,
		head_need = max_t(int, 0, head_need);
		if (ieee80211_skb_resize(sdata, skb, head_need, true)) {
		ieee80211_free_txskb(&local->hw, skb);
		skb = NULL;
		goto fail_rcu;
		}
		}