From: Johannes Berg <johannes@sipsolutions.net>
Date: Wed, 7 May 2008 23:43:59 +0000 (+0200)
Subject: zd1211rw: fix potential use-after-free bug
X-Git-Tag: v2.6.26-rc3~65^2~14^2~4
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dbabad0c9c026dea3ba803cbd9d768cdffc68e32;p=pandora-kernel.git

zd1211rw: fix potential use-after-free bug

zd_mac_tx_to_dev() could potentially free the skb, or hand it off
to mac80211 which might free it. Hence, this code needs to get the
usb pointer out of skb->cb before handing it off to that function.

Signed-off-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
---

Reading git-diff-tree failed