Michal Kazior d70ab4ad87 mac80211: fix txq queue related crashes ...

commit 2a58d42c1e upstream.

The driver can access the queue simultanously
while mac80211 tears down the interface. Without
spinlock protection this could lead to corrupting
sk_buff_head and subsequently to an invalid
pointer dereference.

Fixes: ba8c3d6f16 ("mac80211: add an intermediate software queue implementation")
Signed-off-by: Michal Kazior <michal.kazior@tieto.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-04-20 15:42:11 +09:00

..

aes_ccm.c

…

aes_ccm.h

…

aes_cmac.c

mac80211: remove ieee80211_aes_cmac_calculate_k1_k2()

2015-08-13 11:31:45 +02:00

aes_cmac.h

…

aes_gcm.c

…

aes_gcm.h

…

aes_gmac.c

…

aes_gmac.h

…

agg-rx.c

mac80211: fix use of uninitialised values in RX aggregation

2016-03-16 08:43:00 -07:00

agg-tx.c

mac80211: always set the buf_size in AddBA req to 64

2015-11-20 11:39:40 +01:00

cfg.c

mac80211: handle width changes from opmode notification IE in beacon

2015-12-15 13:16:47 +01:00

chan.c

mac80211: upgrade BW of TDLS peers when possible

2015-07-17 15:38:12 +02:00

debug.h

…

debugfs_key.c

mac80211: allow writing TX PN in debugfs

2015-09-29 15:56:50 +02:00

debugfs_key.h

…

debugfs_netdev.c

mac80211: remove last_beacon/ave_beacon debugfs files

2015-09-22 15:21:25 +02:00

debugfs_netdev.h

…

debugfs_sta.c

mac80211: move station statistics into sub-structs

2015-10-21 10:08:22 +02:00

debugfs_sta.h

…

debugfs.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-10-20 06:08:27 -07:00

debugfs.h

…

driver-ops.c

mac80211: document sleep requirements for channel context ops

2015-11-03 11:15:48 +01:00

driver-ops.h

mac80211: document sleep requirements for channel context ops

2015-11-03 11:15:48 +01:00

ethtool.c

mac80211: move station statistics into sub-structs

2015-10-21 10:08:22 +02:00

ht.c

…

ibss.c

mac80211: fix ibss scan parameters

2016-04-20 15:42:10 +09:00

ieee80211_i.h

mac80211: check PN correctly for GCMP-encrypted fragmented MPDUs

2016-03-16 08:43:00 -07:00

iface.c

mac80211: fix txq queue related crashes

2016-04-20 15:42:11 +09:00

Kconfig

mac80211: use DECLARE_EWMA

2015-08-14 17:49:53 +02:00

key.c

mac80211: remove sta_info.gtk_idx

2015-07-17 15:37:54 +02:00

key.h

mac80211: remove key TX/RX counter

2015-07-17 15:38:01 +02:00

led.c

…

led.h

…

main.c

mac80211: don't advertise NL80211_FEATURE_FULL_AP_CLIENT_STATE

2015-11-17 15:48:50 +01:00

Makefile

mac80211: remove event.c

2015-10-14 18:40:26 +02:00

mesh_hwmp.c

mac80211: move station statistics into sub-structs

2015-10-21 10:08:22 +02:00

mesh_pathtbl.c

mac80211: mesh: fix call_rcu() usage

2015-11-17 15:49:25 +01:00

mesh_plink.c

mac80211: fix crash on mesh local link ID generation with VIFs

2015-11-03 10:43:40 +01:00

mesh_ps.c

mac80211: mesh: separate plid and aid concepts

2015-07-17 15:47:11 +02:00

mesh_sync.c

mac80211: move mesh related station fields to own struct

2015-07-17 15:38:06 +02:00

mesh.c

mac80211: Requeue work after scan complete for all VIF types.

2016-03-03 15:07:26 -08:00

mesh.h

mac80211: Requeue work after scan complete for all VIF types.

2016-03-03 15:07:26 -08:00

michael.c

…

michael.h

…

mlme.c

mac80211: Requeue work after scan complete for all VIF types.

2016-03-03 15:07:26 -08:00

ocb.c

mac80211: move station statistics into sub-structs

2015-10-21 10:08:22 +02:00

offchannel.c

mac80211: use bool argument to ieee80211_send_nullfunc

2015-09-29 15:56:52 +02:00

pm.c

mac80211: don't reconfigure sched scan in case of wowlan

2015-11-03 10:42:05 +01:00

rate.c

mac80211: further improve "no supported rates" warning

2015-11-03 10:56:42 +01:00

rate.h

mac80211: deinline rate_control_rate_init, rate_control_rate_update

2015-07-17 15:50:02 +02:00

rc80211_minstrel_debugfs.c

mac80211: minstrel[_ht]: remove non-ascii debugfs characters

2015-09-29 15:56:47 +02:00

rc80211_minstrel_ht_debugfs.c

mac80211: minstrel[_ht]: remove non-ascii debugfs characters

2015-09-29 15:56:47 +02:00

rc80211_minstrel_ht.c

mac80211: minstrel_ht: fix a logic error in RTS/CTS handling

2016-03-16 08:43:00 -07:00

rc80211_minstrel_ht.h

…

rc80211_minstrel.c

mac80211: minstrel: Change expected throughput unit back to Kbps

2016-03-16 08:42:59 -07:00

rc80211_minstrel.h

…

rx.c

mac80211: fix unnecessary frame drops in mesh fwding

2016-04-20 15:42:10 +09:00

scan.c

mac80211: Requeue work after scan complete for all VIF types.

2016-03-03 15:07:26 -08:00

spectmgmt.c

…

sta_info.c

mac80211: avoid excessive stack usage in sta_info

2016-04-20 15:42:10 +09:00

sta_info.h

mac80211: move station statistics into sub-structs

2015-10-21 10:08:22 +02:00

status.c

Merge tag 'mac80211-next-for-davem-2015-10-21' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next

2015-10-22 07:28:41 -07:00

tdls.c

mac80211: TDLS: add proper HT-oper IE

2015-11-03 10:42:47 +01:00

tkip.c

…

tkip.h

…

trace_msg.h

…

trace.c

…

trace.h

mac80211: allow null chandef in tracing

2015-11-03 10:40:59 +01:00

tx.c

Merge tag 'mac80211-next-for-davem-2015-10-21' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next

2015-10-22 07:28:41 -07:00

util.c

mac80211: reprogram in interface order

2015-12-15 13:13:59 +01:00

vht.c

mac80211: handle width changes from opmode notification IE in beacon

2015-12-15 13:16:47 +01:00

wep.c

…

wep.h

…

wme.c

…

wme.h

…

wpa.c

mac80211: remove event.c

2015-10-14 18:40:26 +02:00

wpa.h

…