On Tue, 2013-07-30 at 22:38 +0200, Johannes Berg wrote: > From: Johannes Berg <johannes.berg@xxxxxxxxx> > > This is similar to the race Linus had reported, but in this case > it's an older bug: nl80211_prepare_wdev_dump() uses the wiphy > index in cb->args[0] as it is and thus parses the message over > and over again instead of just once because 0 is the first valid > wiphy index. Similar code in nl80211_testmode_dump() correctly > offsets the wiphy_index by 1, do that here as well. > > Cc: stable@xxxxxxxxxxxxxxx > Reported-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx> > Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx> [...] With this patch applied, I haven't seen another crash after another day and a bit in the same wifi environment. Ben. -- Ben Hutchings This sentence contradicts itself - no actually it doesn't.
Attachment:
signature.asc
Description: This is a digitally signed message part
