mac80211: delete mesh_path timer on mesh_path removal
authorLuis Carlos Cobo <luisca@cozybit.com>
Fri, 29 Feb 2008 22:49:37 +0000 (14:49 -0800)
committerJohn W. Linville <linville@tuxdriver.com>
Thu, 6 Mar 2008 21:40:51 +0000 (16:40 -0500)
This avoids dereferencing a no longer existing struct mesh_path.

Signed-off-by: Luis Carlos Cobo <luisca@cozybit.com>
Acked-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: John W. Linville <linville@tuxdriver.com>
net/mac80211/mesh_pathtbl.c

index ab4d757c453b7e39aa3fc449b3b040419fde0e00..bd58849f9dfbe0975fd7b2800799490dd7cd24b6 100644 (file)
@@ -301,6 +301,7 @@ static void mesh_path_node_reclaim(struct rcu_head *rp)
        struct ieee80211_sub_if_data *sdata =
                IEEE80211_DEV_TO_SUB_IF(node->mpath->dev);
 
+       del_timer_sync(&node->mpath->timer);
        atomic_dec(&sdata->u.sta.mpaths);
        kfree(node->mpath);
        kfree(node);