Kernel Bug Tracker – Bug 13327
Regression: 2.6.30-rc5 and rt2x00 / rt2500pci
Last modified: 2009-05-18 16:35:17 UTC
Subject : Regression: 2.6.30-rc5 and rt2x00 / rt2500pci
Submitter : Ken Lewis <email@example.com>
Date : 2009-05-15 14:40
References : http://marc.info/?l=linux-kernel&m=124239988223614&w=4
Handled-By : "John W. Linville" <firstname.lastname@example.org>
This entry is being used for tracking a regression from 2.6.29. Please don't
close it until the problem is fixed in the mainline.
John Linville has provided a patch at http://www.kernel.org/pub/linux/kernel/people/linville/wireless-2.6/0002-mac80211-avoid-NULL-ptr-deref-when-finding-max_rate.patch
This patch appears to resolve the issue and John's reporting e-mail says that it received a pull request to Dave M and should be usptream with Linus shortly.
Author: John W. Linville <email@example.com>
Date: Tue May 5 15:18:26 2009 -0400
mac80211: avoid NULL ptr deref when finding max_rates in PID and minstrel
"There is another problem with this piece of code. The sband will be NULL
after second iteration on single band device and cause null pointer
dereference. Everything is working with dual band card. Sorry, but i
don't know how to explain this clearly in English. I have looked on the
second patch for pid algorithm and found similar bug."
Reported-by: Karol Szuster <firstname.lastname@example.org>
Signed-off-by: John W. Linville <email@example.com>