mac80211: Fix panic in aggregation handling
Not assigning the vif pointer causes an oops. This patch fixes it. Signed-off-by: Sujith <Sujith.Manoharan@atheros.com> Signed-off-by: John W. Linville <linville@tuxdriver.com>
This commit is contained in:
parent
24b6b15f7d
commit
0bc6b1871c
|
@ -489,6 +489,7 @@ void ieee80211_start_tx_ba_cb_irqsafe(struct ieee80211_vif *vif,
|
||||||
ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
|
ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
|
||||||
memcpy(&ra_tid->ra, ra, ETH_ALEN);
|
memcpy(&ra_tid->ra, ra, ETH_ALEN);
|
||||||
ra_tid->tid = tid;
|
ra_tid->tid = tid;
|
||||||
|
ra_tid->vif = vif;
|
||||||
|
|
||||||
skb->pkt_type = IEEE80211_ADDBA_MSG;
|
skb->pkt_type = IEEE80211_ADDBA_MSG;
|
||||||
skb_queue_tail(&local->skb_queue, skb);
|
skb_queue_tail(&local->skb_queue, skb);
|
||||||
|
@ -625,6 +626,7 @@ void ieee80211_stop_tx_ba_cb_irqsafe(struct ieee80211_vif *vif,
|
||||||
ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
|
ra_tid = (struct ieee80211_ra_tid *) &skb->cb;
|
||||||
memcpy(&ra_tid->ra, ra, ETH_ALEN);
|
memcpy(&ra_tid->ra, ra, ETH_ALEN);
|
||||||
ra_tid->tid = tid;
|
ra_tid->tid = tid;
|
||||||
|
ra_tid->vif = vif;
|
||||||
|
|
||||||
skb->pkt_type = IEEE80211_DELBA_MSG;
|
skb->pkt_type = IEEE80211_DELBA_MSG;
|
||||||
skb_queue_tail(&local->skb_queue, skb);
|
skb_queue_tail(&local->skb_queue, skb);
|
||||||
|
|
Loading…
Reference in a new issue