3.2.81-rc1 review patch. If anyone has any objections, please let me know.
------------------ From: Linus Lüssing <linus.luess...@c0d3.blue> commit c4fdb6cff2aa0ae740c5f19b6f745cbbe786d42f upstream. When removing a single interface while a broadcast or ogm packet is still pending then we will free the forward packet without releasing the queue slots again. This patch is supposed to fix this issue. Fixes: 6d5808d4ae1b ("batman-adv: Add missing hardif_free_ref in forw_packet_free") Signed-off-by: Linus Lüssing <linus.luess...@c0d3.blue> [s...@narfation.org: fix conflicts with current version] Signed-off-by: Sven Eckelmann <s...@narfation.org> Signed-off-by: Marek Lindner <mareklind...@neomailbox.ch> Signed-off-by: Antonio Quartulli <a...@unstable.cc> [bwh: Backported to 3.2: adjust context] Signed-off-by: Ben Hutchings <b...@decadent.org.uk> --- net/batman-adv/send.c | 6 ++++++ 1 file changed, 6 insertions(+) --- a/net/batman-adv/send.c +++ b/net/batman-adv/send.c @@ -375,6 +375,9 @@ void purge_outstanding_packets(struct ba if (pending) { hlist_del(&forw_packet->list); + if (!forw_packet->own) + atomic_inc(&bat_priv->bcast_queue_left); + forw_packet_free(forw_packet); } } @@ -404,6 +407,9 @@ void purge_outstanding_packets(struct ba if (pending) { hlist_del(&forw_packet->list); + if (!forw_packet->own) + atomic_inc(&bat_priv->batman_queue_left); + forw_packet_free(forw_packet); } }