提交 2c7808d9 编写于 作者: C Christian Lamparter 提交者: John W. Linville

carl9170: fix hang in AP mode when HT STA does PSM

This is a obvious bug, skb_queue_walk does not
work if the iterator gets removed from the queue.
Signed-off-by: NChristian Lamparter <chunkeey@googlemail.com>
Signed-off-by: NJohn W. Linville <linville@tuxdriver.com>
上级 73576110
...@@ -1412,7 +1412,7 @@ static void carl9170_op_sta_notify(struct ieee80211_hw *hw, ...@@ -1412,7 +1412,7 @@ static void carl9170_op_sta_notify(struct ieee80211_hw *hw,
{ {
struct ar9170 *ar = hw->priv; struct ar9170 *ar = hw->priv;
struct carl9170_sta_info *sta_info = (void *) sta->drv_priv; struct carl9170_sta_info *sta_info = (void *) sta->drv_priv;
struct sk_buff *skb; struct sk_buff *skb, *tmp;
struct sk_buff_head free; struct sk_buff_head free;
int i; int i;
...@@ -1462,7 +1462,7 @@ static void carl9170_op_sta_notify(struct ieee80211_hw *hw, ...@@ -1462,7 +1462,7 @@ static void carl9170_op_sta_notify(struct ieee80211_hw *hw,
for (i = 0; i < ar->hw->queues; i++) { for (i = 0; i < ar->hw->queues; i++) {
spin_lock_bh(&ar->tx_pending[i].lock); spin_lock_bh(&ar->tx_pending[i].lock);
skb_queue_walk(&ar->tx_pending[i], skb) { skb_queue_walk_safe(&ar->tx_pending[i], skb, tmp) {
struct _carl9170_tx_superframe *super; struct _carl9170_tx_superframe *super;
struct ieee80211_hdr *hdr; struct ieee80211_hdr *hdr;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册