Here are a couple of fixes for the recent change we did where we moved the core regulatory hint to the queue. In a really slow box or if you are doing crazy testing this can potentilly occur. I take it the patch "cfg80211: put core regulatory request into queue" will note make it in until 2.6.38, so these are not a stable fixes. I was able to force the condition by doing: diff --git a/net/wireless/reg.c b/net/wireless/reg.c index 99d4183..e6f483d0 100644 --- a/net/wireless/reg.c +++ b/net/wireless/reg.c @@ -1481,7 +1481,7 @@ static void reg_process_pending_hints(void) spin_unlock(®_requests_lock); - reg_process_hint(reg_request); + //reg_process_hint(reg_request); out: mutex_unlock(®_mutex); This mimics the situation of either having a slow box or you doing some crazy module load/unload testing. Luis R. Rodriguez (2): cfg80211: fix null pointer dereference with a custom regulatory request ath: fix NULL pointer dereference on reg_notifier() drivers/net/wireless/ath/regd.c | 8 ++++++++ include/net/cfg80211.h | 4 +++- net/wireless/reg.c | 3 ++- 3 files changed, 13 insertions(+), 2 deletions(-) -- 1.7.3.2.90.gd4c43 -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html