From: Johannes Berg <johannes.berg@xxxxxxxxx> If change_interface gets invoked during a firmware restart, it may crash; prevent that from happening by checking if ctx->vif is assigned. Additionally, in my initial commit I forgot to set the vif->p2p variable correctly, so fix that too, even if it doesn't matter since P2P isn't supported. Cc: stable@xxxxxxxxxx [2.6.38+] Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx> --- drivers/net/wireless/iwlegacy/iwl-core.c | 10 ++++++++++ 1 file changed, 10 insertions(+) --- a/drivers/net/wireless/iwlegacy/iwl-core.c 2011-03-29 14:04:06.000000000 +0200 +++ b/drivers/net/wireless/iwlegacy/iwl-core.c 2011-03-29 14:04:42.000000000 +0200 @@ -1805,6 +1805,15 @@ iwl_legacy_mac_change_interface(struct i mutex_lock(&priv->mutex); + if (!ctx->vif) { + /* + * Huh? But wait ... this can maybe happen when + * we're in the middle of a firmware restart! + */ + err = -EBUSY; + goto out; + } + interface_modes = ctx->interface_modes | ctx->exclusive_interface_modes; if (!(interface_modes & BIT(newtype))) { @@ -1832,6 +1841,7 @@ iwl_legacy_mac_change_interface(struct i /* success */ iwl_legacy_teardown_interface(priv, vif, true); vif->type = newtype; + vif->p2p = newp2p; err = iwl_legacy_setup_interface(priv, ctx); WARN_ON(err); /* -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html