On Tue, 2011-07-19 at 17:42 -0400, Pavel Roskin wrote: > for (i = 0; i < IEEE80211_NUM_BANDS; i++) > request->rates[i] = (1 << wiphy->bands[i]->n_bitrates) - 1; Ah crap, I didn't pay attention and never tested a single-band card. Below change should fix it. johannes --- net/wireless/nl80211.c | 4 +++- net/wireless/scan.c | 3 ++- net/wireless/util.c | 3 +++ 3 files changed, 8 insertions(+), 2 deletions(-) --- a/net/wireless/nl80211.c 2011-07-19 23:52:44.000000000 +0200 +++ b/net/wireless/nl80211.c 2011-07-19 23:53:26.000000000 +0200 @@ -3454,7 +3454,9 @@ static int nl80211_trigger_scan(struct s } for (i = 0; i < IEEE80211_NUM_BANDS; i++) - request->rates[i] = (1 << wiphy->bands[i]->n_bitrates) - 1; + if (wiphy->bands[i]) + request->rates[i] = + (1 << wiphy->bands[i]->n_bitrates) - 1; if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) { nla_for_each_nested(attr, --- a/net/wireless/scan.c 2011-07-19 23:52:45.000000000 +0200 +++ b/net/wireless/scan.c 2011-07-19 23:53:21.000000000 +0200 @@ -864,7 +864,8 @@ int cfg80211_wext_siwscan(struct net_dev } for (i = 0; i < IEEE80211_NUM_BANDS; i++) - creq->rates[i] = (1 << wiphy->bands[i]->n_bitrates) - 1; + if (wiphy->bands[i]) + creq->rates[i] = (1 << wiphy->bands[i]->n_bitrates) - 1; rdev->scan_req = creq; err = rdev->ops->scan(wiphy, dev, creq); --- a/net/wireless/util.c 2011-07-19 23:53:39.000000000 +0200 +++ b/net/wireless/util.c 2011-07-19 23:53:57.000000000 +0200 @@ -1013,6 +1013,9 @@ int ieee80211_get_ratemask(struct ieee80 { int i, j; + if (!sband) + return -EINVAL; + if (n_rates == 0 || n_rates > NL80211_MAX_SUPP_RATES) return -EINVAL; -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html