Date: Fri, 29 Mar 2013 21:30:03 GMT From: PseudoCylon <moonlightakkiy@yahoo.ca> To: freebsd-wireless@FreeBSD.org Subject: Re: kern/177451: [ieee80211] page fault in ieee80211_tx_mgt_timeout Message-ID: <201303292130.r2TLU3Hx045533@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/177451; it has been noted by GNATS. From: PseudoCylon <moonlightakkiy@yahoo.ca> To: bug-followup@FreeBSD.org, davide@FreeBSD.org Cc: Subject: Re: kern/177451: [ieee80211] page fault in ieee80211_tx_mgt_timeout Date: Fri, 29 Mar 2013 15:21:58 -0600 http://fxr.watson.org/fxr/source/net80211/ieee80211_output.c?v=FREEBSD91#L2506 enum ieee80211_state ostate = (enum ieee80211_state) arg; casting a pointer to an enum http://fxr.watson.org/fxr/source/net80211/ieee80211_output.c?v=FREEBSD91#L2519 if (vap->iv_state == ostate) So that, this test is always false -> callout_reset() will never be called -> by the time the callout timer runs out, ni could be freed.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201303292130.r2TLU3Hx045533>