| commit | 9379df2fd9234e3b67a23101c2370c99f6af6d77 | [log] [tgz] |
|---|---|---|
| author | Felix Fietkau <nbd@nbd.name> | Sat Dec 14 00:15:26 2019 +0100 |
| committer | Felix Fietkau <nbd@nbd.name> | Fri Feb 14 10:06:02 2020 +0100 |
| tree | a0ee2c7a5c3cca29284905b5ea2eed5ac151d801 | |
| parent | d55aa5e17461b8b423adae376978032c4a10a1d8 [diff] |
mt76: clear skb pointers from rx aggregation reorder buffer during cleanup During the cleanup of the aggregation session, a rx handler (or release timer) on another CPU might still hold a pointer to the reorder buffer and could attempt to release some packets. Clearing pointers during cleanup avoids a theoretical use-after-free bug here. Signed-off-by: Felix Fietkau <nbd@nbd.name>