From: Michal Kazior <michal.kazior@tieto.com>
Date: Wed, 9 Apr 2014 13:29:32 +0000 (+0200)
Subject: mac80211: fix racy usage of chanctx->refcount
X-Git-Tag: omap-for-v3.16/fixes-against-rc1~36^2~279^2^2~12^2~15
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2b32713d72c093889fe20642f6a8bc42083267d2;p=pandora-kernel.git

mac80211: fix racy usage of chanctx->refcount

Channel context refcount is protected by
chanctx_mtx. Accessing the value without holding
the mutex is racy. RCU section didn't guarantee
anything here.

Theoretically ieee80211_channel_switch() could
fail to see refcount change and read "1" instead
of, e.g. "2". This means mac80211 could accept CSA
even though it shouldn't have.

Signed-off-by: Michal Kazior <michal.kazior@tieto.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
---

Reading git-diff-tree failed