diff options
| author |   Felix Fietkau <nbd@openwrt.org> | 2010-01-11 06:47:00 +0100 |
|---|---|---|
| committer |   John W. Linville <linville@tuxdriver.com> | 2010-01-11 19:37:09 -0500 |
| commit | 193e70ef65a6c33f2935ce1f4adeb08ecb9202cf (patch) | |
| tree | f079d1fe437bb9cd1f69ace985114e074c65a023 /net/wireless | |
| parent | iwlwifi: silence buffer overflow warning (diff) | |
| download | linux-dev-193e70ef65a6c33f2935ce1f4adeb08ecb9202cf.tar.xz linux-dev-193e70ef65a6c33f2935ce1f4adeb08ecb9202cf.zip | |
mac80211: fix queue selection for data frames on monitor interfaces
When ieee80211_monitor_select_queue encounters data frames, it selects
the WMM AC based on skb->priority and assumes that skb->priority
contains a valid 802.1d tag. However this assumption is incorrect, since
ieee80211_select_queue has not been called at this point.
If skb->priority > 7, an array overrun occurs, which could lead to
invalid values, resulting in crashes in the tx path.
Fix this by setting skb->priority based on the 802.11 header for QoS
frames and using the default AC for all non-QoS frames.
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
Diffstat (limited to 'net/wireless')
0 files changed, 0 insertions, 0 deletions