From 70339802ca6cf73e88f48049d1826a1d25f15520 Mon Sep 17 00:00:00 2001 From: mtaylor Date: Sat, 19 Jan 2008 01:02:26 +0000 Subject: [PATCH] Fix a bug where bf->bf_skb needs to be set to NULL because the skbuff have already been freed by ath_tx_capture, for each frame in the list we have already freed the skb but the original pointer to the list of skbs is still in bf->bf_skb. So when bf is returned with ath_return_txbuf it tries to double-free, resuilting a spew of backtraces/warnings when reference debugging is enabled. Not to mention the fact that the skb is double-freed. git-svn-id: http://madwifi-project.org/svn/madwifi/trunk@3220 0192ed92-7a03-0410-a25b-9323aeb14dbd --- ath/if_ath.c | 1 + 1 file changed, 1 insertion(+) diff --git a/ath/if_ath.c b/ath/if_ath.c index f00dbaa..31a7df3 100644 --- a/ath/if_ath.c +++ b/ath/if_ath.c @@ -8071,6 +8071,7 @@ ath_tx_processq(struct ath_softc *sc, struct ath_txq *txq) #endif } + bf->bf_skb = NULL; ni = NULL; ath_return_txbuf(sc, &bf); } -- 2.35.1