I am excluding "iwlwifi: set HT flags after channel in rxon" from this resend since it has been merged into wireless-2.6 already. We address http://bugzilla.intellinuxwireless.org/show_bug.cgi?id=2160 where it can be seen that there are instances where the number of freed tfds are negative, which is triggered by the receipt of a TX response with incorrect frame control. We include two patches to (1) prevent the problem from occuring, and (2) prevent the problem from propagating when it does occur. These patches are also available from wireless-2.6 branch on git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-2.6.git Stanislaw Gruszka (1): iwlwifi: sanity check before counting number of tfds can be free Wey-Yi Guy (1): iwlwifi: error checking for number of tfds in queue drivers/net/wireless/iwlwifi/iwl-4965.c | 2 +- drivers/net/wireless/iwlwifi/iwl-5000.c | 8 +++----- drivers/net/wireless/iwlwifi/iwl-core.h | 2 ++ drivers/net/wireless/iwlwifi/iwl-tx.c | 22 ++++++++++++++++++++-- 4 files changed, 26 insertions(+), 8 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html