lk/linux-kernel-test
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

mac80211: Fix RCU pointer dereference in mesh_path_discard_frame()

Browse Source 
Reported by Pedro Larbig (ASPj)

Signed-off-by: Javier Cardona <javier@cozybit.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
This commit is contained in:
Javier Cardona
2011-08-29 13:23:03 -07:00
committed by John W. Linville
parent 5982b47aa4
commit af089c15cb
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
net/mac80211/mesh_pathtbl.c
View File

@@ -991,9 +991,14 @@ void mesh_path_discard_frame(struct sk_buff *skb,
da = hdr->addr3; da = hdr->addr3;
ra = hdr->addr1; ra = hdr->addr1;
rcu_read_lock();
mpath = mesh_path_lookup(da, sdata); mpath = mesh_path_lookup(da, sdata);
if (mpath) if (mpath) {
spin_lock_bh(&mpath->state_lock);
sn = ++mpath->sn; sn = ++mpath->sn;
spin_unlock_bh(&mpath->state_lock);
}
rcu_read_unlock();
mesh_path_error_tx(sdata->u.mesh.mshcfg.element_ttl, skb->data, mesh_path_error_tx(sdata->u.mesh.mshcfg.element_ttl, skb->data,
cpu_to_le32(sn), reason, ra, sdata); cpu_to_le32(sn), reason, ra, sdata);
} }