Felix Fietkau 81357a281d ath9k: fix a use-after-free-bug when ath_tx_setup_buffer() fails ... ath_tx_setup_buffer() can fail if there is no ath_buf left, or if mapping DMA failed. In this case it frees the skb passed to it. If ath_tx_setup_buffer is called from ath_tx_form_aggr, the skb is still linked into the tid buffer list and must be dequeued before being released. Signed-off-by: Felix Fietkau <nbd@openwrt.org> Cc: stable@vger.kernel.org Signed-off-by: John W. Linville <linville@tuxdriver.com>		2012-05-29 13:45:22 -04:00
..
ath	ath9k: fix a use-after-free-bug when ath_tx_setup_buffer() fails	2012-05-29 13:45:22 -04:00
b43	b43: use pci_is_pcie() instead of obsolete pci_dev.is_pcie	2012-05-16 12:46:33 -04:00
b43legacy	ssb: remove rev from boardinfo	2012-05-16 12:45:20 -04:00
brcm80211	brcmfmac: use vmalloc to allocate mem for the firmware	2012-05-25 11:16:16 -04:00
hostap	net/wireless: use module_pci_driver	2012-04-16 14:38:50 -04:00
ipw2x00	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next	2012-05-14 18:00:48 -04:00
iwlegacy	drivers/net: Convert compare_ether_addr to ether_addr_equal	2012-05-10 23:33:01 -04:00
iwlwifi	iwlwifi: fix memory leak if opmode fails to init	2012-05-25 11:12:41 -04:00
iwmc3200wifi	drivers/net: iwmc3200 depends on EXPERIMENTAL	2012-04-21 15:28:47 -04:00
libertas	libertas: include sched.h on firmware.c	2012-05-08 20:56:07 -04:00
libertas_tf
mwifiex	mwifiex: remove set_channel cfg80211 hook	2012-05-16 13:08:25 -04:00
orinoco	wireless, orinoco: release_firmware() tests for NULL, remove explicit tests before calls	2012-04-12 15:06:08 -04:00
p54	drivers/net: Convert compare_ether_addr to ether_addr_equal	2012-05-10 23:33:01 -04:00
prism54	prism54: replace open-coded ARRAY_SIZE with macro	2012-04-12 15:10:47 -04:00
rt2x00	rt2x00:Add RT539b chipset support	2012-05-16 12:46:37 -04:00
rtl818x	net/wireless: use module_pci_driver	2012-04-16 14:38:50 -04:00
rtlwifi	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2012-05-16 22:17:37 -04:00
ti	wl1251: fix oops on early interrupt	2012-05-25 11:16:16 -04:00
zd1211rw	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2012-03-20 21:12:50 -07:00
adm8211.c	net/wireless: use module_pci_driver	2012-04-16 14:38:50 -04:00
adm8211.h
airo_cs.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
airo.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
airo.h
at76c50x-usb.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next	2012-05-14 18:00:48 -04:00
at76c50x-usb.h
atmel_cs.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
atmel_pci.c	net/wireless: use module_pci_driver	2012-04-16 14:38:50 -04:00
atmel.c	wireless, atmel: remove pointless test for NULL before release_firmware() call	2012-04-12 15:06:07 -04:00
atmel.h
Kconfig	wireless/wl12xx/wl1251: move TI WLAN modules to a common ti subdirectory	2012-04-12 08:43:55 +03:00
mac80211_hwsim.c	mac80211_hwsim: Fix rate control by correctly reporting transmission counts	2012-05-15 17:27:27 -04:00
mac80211_hwsim.h
Makefile	wireless/wl12xx/wl1251: move TI WLAN modules to a common ti subdirectory	2012-04-12 08:43:55 +03:00
mwl8k.c	drivers/net: Convert compare_ether_addr to ether_addr_equal	2012-05-10 23:33:01 -04:00
ray_cs.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
ray_cs.h
rayctl.h
rndis_wlan.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next	2012-05-22 15:18:06 -04:00
wl3501_cs.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
wl3501.h
zd1201.c
zd1201.h