72471c0d31
Function del_timer() does not guarantee that timer was really deleted. If the timer handler is beeing executed at the moment, the function does nothing. So, it's possible to use already freed memory in the handler: [ref: Documentation/DocBook/kernel-locking.tmpl] This was found using grep and compile-tested only. Please, consider applying or something similar to it. Signed-off-by: Kirill Tkhai <ktkhai@parallels.com> CC: Jouni Malinen <j@w1.fi> CC: John W. Linville <linville@tuxdriver.com> Signed-off-by: John W. Linville <linville@tuxdriver.com> |
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| hostap.h | ||
| hostap_80211.h | ||
| hostap_80211_rx.c | ||
| hostap_80211_tx.c | ||
| hostap_ap.c | ||
| hostap_ap.h | ||
| hostap_common.h | ||
| hostap_config.h | ||
| hostap_cs.c | ||
| hostap_download.c | ||
| hostap_hw.c | ||
| hostap_info.c | ||
| hostap_ioctl.c | ||
| hostap_main.c | ||
| hostap_pci.c | ||
| hostap_plx.c | ||
| hostap_proc.c | ||
| hostap_wlan.h | ||