From owner-cvs-all@FreeBSD.ORG Sat Aug 6 04:56:50 2005 Return-Path: X-Original-To: cvs-all@FreeBSD.org Delivered-To: cvs-all@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 288E916A41F; Sat, 6 Aug 2005 04:56:50 +0000 (GMT) (envelope-from sam@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id F07B043D45; Sat, 6 Aug 2005 04:56:49 +0000 (GMT) (envelope-from sam@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j764unuP053697; Sat, 6 Aug 2005 04:56:49 GMT (envelope-from sam@repoman.freebsd.org) Received: (from sam@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j764unZK053696; Sat, 6 Aug 2005 04:56:49 GMT (envelope-from sam) Message-Id: <200508060456.j764unZK053696@repoman.freebsd.org> From: Sam Leffler Date: Sat, 6 Aug 2005 04:56:49 +0000 (UTC) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: src/sys/net80211 ieee80211_input.c ieee80211_node.c ieee80211_node.h X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Aug 2005 04:56:50 -0000 sam 2005-08-06 04:56:49 UTC FreeBSD src repository Modified files: sys/net80211 ieee80211_input.c ieee80211_node.c ieee80211_node.h Log: Fix handling of frames sent prior to a station being authorized when operating in ap mode. Previously we allocated a node from the station table, sent the frame (using the node), then released the reference that "held the frame in the table". But while the frame was in flight the node might be reclaimed which could lead to problems. The solution is to add an ieee80211_tmp_node routine that crafts a node that does exist in a table and so isn't ever reclaimed; it exists only so long as the associated frame is in flight. MFC after: 5 days Revision Changes Path 1.78 +2 -2 src/sys/net80211/ieee80211_input.c 1.60 +36 -0 src/sys/net80211/ieee80211_node.c 1.20 +2 -0 src/sys/net80211/ieee80211_node.h