On 1 June 2016 at 23:13, Arend van Spriel <ar...@broadcom.com> wrote:
> From: Franky Lin <franky....@broadcom.com>
>
> A regression was introduced in commit 9c349892ccc9 ("brcmfmac: revise
> handling events in receive path") which moves eth_type_trans() call
> to brcmf_rx_frame(). Msgbuf layer doesn't use brcmf_rx_frame() but invokes
> brcmf_netif_rx() directly. In such case the Ethernet header was not
> stripped out resulting in null pointer dereference in the networking
> stack.
>
> (...)
>
> Reported-by: Grey Christoforo <g...@christoforo.net>Well, I reported this as well, over a month ago :( https://patchwork.kernel.org/patch/8799231/ http://www.spinics.net/lists/linux-wireless/msg150110.html Tested-by: Rafał Miłecki <zaj...@gmail.com> -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
