Author: blogic Date: 2015-01-30 09:06:28 +0100 (Fri, 30 Jan 2015) New Revision: 44220
Modified: trunk/package/kernel/mac80211/patches/321-mac80211-add-an-intermediate-software-queue-implemen.patch Log: mac80211: fix NULL pointer crash in monitor frame injection TX path This "patch to the patch" fixes a NULL pointer derefence crash in the new intermediate software queues. The crash can be reproduced by injecting an 802.11 frame with a BSSID that does not belong to a configured vif. The wperf tool (https://github.com/anyfi/wperf) may be convenient for doing this. Signed-off-by: Johan Almbladh <[email protected]> Modified: trunk/package/kernel/mac80211/patches/321-mac80211-add-an-intermediate-software-queue-implemen.patch =================================================================== --- trunk/package/kernel/mac80211/patches/321-mac80211-add-an-intermediate-software-queue-implemen.patch 2015-01-30 07:25:43 UTC (rev 44219) +++ trunk/package/kernel/mac80211/patches/321-mac80211-add-an-intermediate-software-queue-implemen.patch 2015-01-30 08:06:28 UTC (rev 44220) @@ -384,7 +384,7 @@ + if (pubsta) { + u8 tid = skb->priority & IEEE80211_QOS_CTL_TID_MASK; + pubtxq = pubsta->txq[tid]; -+ } else { ++ } else if (vif) { + pubtxq = vif->txq; + } + _______________________________________________ openwrt-commits mailing list [email protected] https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-commits
