Christian Lamparter wrote: > In theory, the firmware acks the received a data frame, before signaling the driver to free it again. > However Artur Skawina <art.08.09@xxxxxxxxx> has shown that it can happen in reverse order as well. > This is very bad and could lead to memory corruptions, oopses and panics. > > Thanks to Artur Skawina <art.08.09@xxxxxxxxx> for reporting and debugging this issue. > > Signed-off-by: Christian Lamparter <chunkeey@xxxxxx> > --- > Anyone with a p54usb device (Especially you, Artur :-) ): > > Please test this! > Because it should go to wireless-2.6 / 2.6.29 as well (John?) good news: i've run a few tests w/ it and didn't see any memory corruption warnings, previously i used to get them almost immediately, usually during association, now i was able to transfer ~1M of data w/ no sign of corruption. The large packet loss is still there and the device is still unusable (because of the extremely low throughput, that 1M took several minutes to transfer and three attempts to associate before it worked). But no crashes, that's a huge improvement :) Tested-by: Artur Skawina <art.08.09@xxxxxxxxx> artur -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
