On Thu, 2012-11-29 at 01:26 +0100, Johannes Berg wrote: > From: Johannes Berg <johannes.berg@xxxxxxxxx> > > When a BSS struct is updated, the IEs are currently > overwritten or freed. This can lead to races if some > other CPU is accessing the BSS struct and using the > IEs concurrently. > > Fix this by always allocating the IEs in a new struct > that holds the data and length and protecting access > to this new struct with RCU. Eliad pointed out to me that the mac80211 code will call kmalloc(GFP_KERNEL) inside the rcu critical section, which isn't allowed. So instead of changing that to GFP_ATOMIC or something, I just posted two patches to remove the allocation :-) johannes -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html