ath9k: fix another buffer leak in the aggregation code
SVN-Revision: 22360
This commit is contained in:
parent
52646b63b1
commit
90a71cd326
1 changed files with 32 additions and 0 deletions
32
package/mac80211/patches/520-ath9k_leak_fix.patch
Normal file
32
package/mac80211/patches/520-ath9k_leak_fix.patch
Normal file
|
@ -0,0 +1,32 @@
|
|||
--- a/drivers/net/wireless/ath/ath9k/xmit.c
|
||||
+++ b/drivers/net/wireless/ath/ath9k/xmit.c
|
||||
@@ -518,6 +518,14 @@ static void ath_tx_complete_aggr(struct
|
||||
bf = bf_next;
|
||||
}
|
||||
|
||||
+ /* prepend un-acked frames to the beginning of the pending frame queue */
|
||||
+ if (!list_empty(&bf_pending)) {
|
||||
+ spin_lock_bh(&txq->axq_lock);
|
||||
+ list_splice(&bf_pending, &tid->buf_q);
|
||||
+ ath_tx_queue_tid(txq, tid);
|
||||
+ spin_unlock_bh(&txq->axq_lock);
|
||||
+ }
|
||||
+
|
||||
if (tid->state & AGGR_CLEANUP) {
|
||||
if (tid->baw_head == tid->baw_tail) {
|
||||
tid->state &= ~AGGR_ADDBA_COMPLETE;
|
||||
@@ -530,14 +538,6 @@ static void ath_tx_complete_aggr(struct
|
||||
return;
|
||||
}
|
||||
|
||||
- /* prepend un-acked frames to the beginning of the pending frame queue */
|
||||
- if (!list_empty(&bf_pending)) {
|
||||
- spin_lock_bh(&txq->axq_lock);
|
||||
- list_splice(&bf_pending, &tid->buf_q);
|
||||
- ath_tx_queue_tid(txq, tid);
|
||||
- spin_unlock_bh(&txq->axq_lock);
|
||||
- }
|
||||
-
|
||||
rcu_read_unlock();
|
||||
|
||||
if (needreset)
|
Loading…
Reference in a new issue