On Thu, Feb 25, 2021 at 03:37:08PM +0100, Johannes Berg wrote: > From: Johannes Berg <johannes.berg@xxxxxxxxx> > > If a client dies while we're waiting for an ACK from it, then > wmediumd_api_handler() will call wmediumd_remove_client() and > free the client, even while we're still waiting for it to > respond in wmediumd_wait_for_client_ack(). This leads then to > wmediumd_wait_for_client_ack() using the data after it was > already freed, and we also get stuck. Applied, thanks.
