From: Jouni Malinen <j@w1.fi>
Date: Fri, 13 Mar 2009 11:59:39 +0000 (+0200)
Subject: mac80211: Fix panic on fragmentation with power saving
X-Git-Tag: v2.6.29~3^2~22^2~1
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=055249d20de06c290fe7625be0a7164bef3958f5;p=pandora-kernel.git

mac80211: Fix panic on fragmentation with power saving

It was possible to hit a kernel panic on NULL pointer dereference in
dev_queue_xmit() when sending power save buffered frames to a STA that
woke up from sleep. This happened when the buffered frame was requeued
for transmission in ap_sta_ps_end(). In order to avoid the panic, copy
the skb->dev and skb->iif values from the first fragment to all other
fragments.

Signed-off-by: Jouni Malinen <jouni.malinen@atheros.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
---

Reading git-diff-tree failed