From: mtaylor <mtaylor@0192ed92-7a03-0410-a25b-9323aeb14dbd>
Date: Sat, 19 Jan 2008 01:02:26 +0000 (+0000)
Subject: Fix a bug where bf->bf_skb needs to be set to NULL because the skbuff have already... 
X-Git-Url: http://git.ozo.com/?a=commitdiff_plain;h=70339802ca6cf73e88f48049d1826a1d25f15520;p=madwifi%2F.git

Fix a bug where bf->bf_skb needs to be set to NULL because the skbuff have already been freed by
ath_tx_capture, for each frame in the list we have already freed the skb but the original pointer to
the list of skbs is still in bf->bf_skb.  So when bf is returned with ath_return_txbuf it tries to
double-free, resuilting a spew of backtraces/warnings when reference debugging is enabled.

Not to mention the fact that the skb is double-freed.


git-svn-id: http://madwifi-project.org/svn/madwifi/trunk@3220 0192ed92-7a03-0410-a25b-9323aeb14dbd
---

diff --git a/ath/if_ath.c b/ath/if_ath.c
index f00dbaa..31a7df3 100644
--- a/ath/if_ath.c
+++ b/ath/if_ath.c
@@ -8071,6 +8071,7 @@ ath_tx_processq(struct ath_softc *sc, struct ath_txq *txq)
 #endif
 		}
 
+		bf->bf_skb = NULL;
 		ni = NULL;
 		ath_return_txbuf(sc, &bf);
 	}