On Wed, 2011-07-13 at 16:45 -0700, Thomas Pedersen wrote: > goto out; > @@ -2269,6 +2270,14 @@ struct sk_buff *ieee80211_beacon_get_tim(struct ieee80211_hw *hw, > memcpy(skb_put(skb, beacon->head_len), beacon->head, > beacon->head_len); > > + pos = skb_put(skb, 6); You just keep adding here -- how is the length of the skb determined? johannes -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html