Those are a couple of fixes that prevent crashes due to processing packets (especially multicast ones) for TX after vif is stopped (either after a mesh interface left the group or interface is put down). The first one ensure the key info passed to drivers through ieee80211 skb control block is up to date, even after key removal. The second one ensure no packets get processed after vif driver private data is cleared in ieee80211_do_stop(). As I tried to explain in second patch footnote, I can still see a theoretical reason that packets get queued after ieee80211_do_stop() call. But I was not able to reproduce it, so I may be missing a something here; making that more as an open question. Remi Pommarel (2): wifi: mac80211: Update skb's NULL key in ieee80211_tx_h_select_key() wifi: mac80211: Purge vif txq in ieee80211_do_stop() net/mac80211/iface.c | 3 +++ net/mac80211/tx.c | 6 ++++++ 2 files changed, 9 insertions(+) -- 2.40.0
