From: Michal Kazior <michal.kazior@tieto.com>
Date: Wed, 14 May 2014 13:23:31 +0000 (+0300)
Subject: ath10k: fix htt rx ring clean up
X-Git-Tag: omap-for-v3.16/fixes-against-rc1~36^2~99^2^2~1^2~24
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3e841fd0a54745c8ad24ecfb0303c505b7460ffb;p=pandora-kernel.git

ath10k: fix htt rx ring clean up

msdu_payId was read before txrx tasklet was killed
so it was possible to end up using an invalid
sk_buff pointer leading to a panic.

Make sure to sanitize rx ring sk_buff pointers and
make the clean up go through all possible entries
and not rely on coherent-DMA mapped u32 index
which could be (in theory) corrupted by the device
as well.

Reported-By: Avery Pennarun <apenwarr@gmail.com>
Reported-By: Ben Greear <greearb@candelatech.com>
Signed-off-by: Michal Kazior <michal.kazior@tieto.com>
Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>
---

Reading git-diff-tree failed