• Michael Buesch's avatar
    [PATCH] softmac: fix spinlock recursion on reassoc · 9b0b4d8a
    Michael Buesch authored
    This fixes a spinlock recursion on receiving a reassoc request.
    
    On reassoc, the softmac calls back into the driver. This results in a
    driver lock recursion. This schedules the assoc workqueue, instead
    of calling it directly.
    
    Probably, we should defer the _whole_ management frame processing
    to a tasklet or workqueue, because it does several callbacks into the driver.
    That is dangerous.
    
    This fix should go into linus's tree, before 2.6.17 is released, because it
    is remote exploitable (DoS by crash).
    Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
    9b0b4d8a
ieee80211softmac_assoc.c 13.2 KB