On Thu, Sep 27, 2012 at 12:06:17PM +0800, Ming Lei wrote: > On Thu, Sep 13, 2012 at 10:33 AM, Ming Lei <ming.lei@xxxxxxxxxxxxx> wrote: > > Inside ath9k_hif_usb_firmware_fail(), the instance of > > 'struct struct hif_device_usb' may be freed by > > ath9k_hif_usb_disconnect() after > > > > complete(&hif_dev->fw_done); > > > > But 'hif_dev' is still accessed after the line code > > above is executed. > > > > This patch fixes the issue by not accessing 'hif_dev' > > after 'complete(&hif_dev->fw_done)' inside > > ath9k_hif_usb_firmware_fail(). > > > > Cc: ath9k-devel@xxxxxxxxxxxxxxx > > Cc: "Luis R. Rodriguez" <mcgrof@xxxxxxxxxxxxxxxx> > > Cc: Jouni Malinen <jouni@xxxxxxxxxxxxxxxx> > > Cc: Vasanthakumar Thiagarajan <vthiagar@xxxxxxxxxxxxxxxx> > > Cc: Senthil Balasubramanian <senthilb@xxxxxxxxxxxxxxxx> > > Cc: "John W. Linville" <linville@xxxxxxxxxxxxx> > > Gentle ping, :-) This is commit e962610f8100e1b52973f5a9c855cbc3d1ba04ec in wireless-next? -- John W. Linville Someday the world will need a hero, and you linville@xxxxxxxxxxxxx might be all we have. Be ready. -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
