twx-linux/drivers/net/wireless/hostap
Kirill Tkhai 72471c0d31 hostap: Do not free priv until timer handler has actually stopped using it
Function del_timer() does not guarantee that timer was really deleted.
If the timer handler is beeing executed at the moment, the function
does nothing. So, it's possible to use already freed memory in the handler:

[ref: Documentation/DocBook/kernel-locking.tmpl]

This was found using grep and compile-tested only. Please, consider
applying or something similar to it.

Signed-off-by: Kirill Tkhai <ktkhai@parallels.com>
CC: Jouni Malinen <j@w1.fi>
CC: John W. Linville <linville@tuxdriver.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2014-02-20 15:49:07 -05:00
..
hostap_80211_rx.c
hostap_80211_tx.c
hostap_80211.h
hostap_ap.c hostap: Do not free priv until timer handler has actually stopped using it 2014-02-20 15:49:07 -05:00
hostap_ap.h
hostap_common.h
hostap_config.h
hostap_cs.c wireless: delete non-required instances of include <linux/init.h> 2014-01-03 15:37:01 -05:00
hostap_download.c
hostap_hw.c
hostap_info.c
hostap_ioctl.c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into for-davem 2014-01-10 10:59:40 -05:00
hostap_main.c
hostap_pci.c wireless: delete non-required instances of include <linux/init.h> 2014-01-03 15:37:01 -05:00
hostap_plx.c wireless: delete non-required instances of include <linux/init.h> 2014-01-03 15:37:01 -05:00
hostap_proc.c hostap: fix "hostap: proc: Use remove_proc_subtree()" 2014-02-13 14:58:12 -05:00
hostap_wlan.h
hostap.h
Kconfig
Makefile