mac802154: Fix memory corruption with global deferred transmit state.
authorLennert Buytenhek <buytenh@wantstofly.org>
Tue, 21 Jul 2015 14:44:47 +0000 (17:44 +0300)
committerMarcel Holtmann <marcel@holtmann.org>
Thu, 30 Jul 2015 12:08:55 +0000 (14:08 +0200)
commitc22ff7b4e74d8136a9911d8b8d0f25f9f7c3edc1
tree172c0937f69b785793e1f2e63776341833c5800b
parent8b44f0dd2f90acd6c8842537223b39f890f2e713
mac802154: Fix memory corruption with global deferred transmit state.

When transmitting a packet via a mac802154 driver that can sleep in
its transmit function, mac802154 defers the call to the driver's
transmit function to a per-device workqueue.

However, mac802154 uses a single global work_struct for this, which
means that if you have more than one registered mac802154 interface
in the system, and you transmit on more than one of them at the same
time, you'll very easily cause memory corruption.

This patch moves the deferred transmit processing state from global
variables to struct ieee802154_local, and this seems to fix the memory
corruption issue.

Signed-off-by: Lennert Buytenhek <buytenh@wantstofly.org>
Acked-by: Alexander Aring <alex.aring@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
net/mac802154/ieee802154_i.h
net/mac802154/main.c
net/mac802154/tx.c
This page took 0.027608 seconds and 5 git commands to generate.