mac80211: fix NULL pointer crash in monitor frame injection TX path
This "patch to the patch" fixes a NULL pointer derefence crash in the new intermediate software queues. The crash can be reproduced by injecting an 802.11 frame with a BSSID that does not belong to a configured vif. The wperf tool (https://github.com/anyfi/wperf) may be convenient for doing this. Signed-off-by: Johan Almbladh <ja@anyfi.net> SVN-Revision: 44220
This commit is contained in:
parent
539cd23892
commit
b86545c86d
1 changed files with 1 additions and 1 deletions
|
@ -384,7 +384,7 @@ Signed-off-by: Felix Fietkau <nbd@openwrt.org>
|
|||
+ if (pubsta) {
|
||||
+ u8 tid = skb->priority & IEEE80211_QOS_CTL_TID_MASK;
|
||||
+ pubtxq = pubsta->txq[tid];
|
||||
+ } else {
|
||||
+ } else if (vif) {
|
||||
+ pubtxq = vif->txq;
|
||||
+ }
|
||||
+
|
||||
|
|
Loading…
Reference in a new issue