diff options
| author | Juuso Oikarinen <juuso.oikarinen@nokia.com> | 2010-02-12 10:05:45 +0200 |
|---|---|---|
| committer | John W. Linville <linville@tuxdriver.com> | 2010-02-12 14:50:22 -0500 |
| commit | 5affcd6ba2036b59a4dee3f0576ae3584e92e4f1 (patch) | |
| tree | 78c6d3a329968b253d5c67c7d11adc0ab9af3c3d | |
| parent | fafaf31bf9f965d91462ee115e27ef6c262b74ea (diff) | |
| download | kernel_samsung_tuna-5affcd6ba2036b59a4dee3f0576ae3584e92e4f1.zip kernel_samsung_tuna-5affcd6ba2036b59a4dee3f0576ae3584e92e4f1.tar.gz kernel_samsung_tuna-5affcd6ba2036b59a4dee3f0576ae3584e92e4f1.tar.bz2 | |
mac80211: fix handling of null-rate control in rate_control_get_rate
For hardware with IEEE80211_HW_HAS_RATE_CONTROL the rate controller is not
initialized. However, calling functions such as ieee80211_beacon_get result
in the rate_control_get_rate function getting called, which is accessing
(in this case uninitialized) rate control structures unconditionally.
Fix by exiting the function before setting the rates for HW with
IEEE80211_HW_HAS_RATE_CONTROL set. The initialization of the ieee80211_tx_info
struct is intentionally still executed.
Signed-off-by: Juuso Oikarinen <juuso.oikarinen@nokia.com>
Reviewed-by: Kalle Valo <kalle.valo@nokia.com>
Cc: stable@kernel.org
Signed-off-by: John W. Linville <linville@tuxdriver.com>
| -rw-r--r-- | net/mac80211/rate.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/net/mac80211/rate.c b/net/mac80211/rate.c index b9007f8..12a2bff 100644 --- a/net/mac80211/rate.c +++ b/net/mac80211/rate.c @@ -245,6 +245,9 @@ void rate_control_get_rate(struct ieee80211_sub_if_data *sdata, info->control.rates[i].count = 1; } + if (sdata->local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) + return; + if (sta && sdata->force_unicast_rateidx > -1) { info->control.rates[0].idx = sdata->force_unicast_rateidx; } else { |