Date: Fri, 29 Mar 2013 22:50:01 GMT From: PseudoCylon <moonlightakkiy@yahoo.ca> To: freebsd-wireless@FreeBSD.org Subject: Re: kern/177451: [ieee80211] page fault in ieee80211_tx_mgt_timeout Message-ID: <201303292250.r2TMo1qu060081@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/177451; it has been noted by GNATS. From: PseudoCylon <moonlightakkiy@yahoo.ca> To: bug-followup@freebsd.org, davide@freebsd.org Cc: Subject: Re: kern/177451: [ieee80211] page fault in ieee80211_tx_mgt_timeout Date: Fri, 29 Mar 2013 16:37:20 -0600 Oops. The code casts the enum to the pointer to begin, so it works. Sorry, for the noise. On Fri, Mar 29, 2013 at 3:21 PM, PseudoCylon <moonlightakkiy@yahoo.ca> wrote: > http://fxr.watson.org/fxr/source/net80211/ieee80211_output.c?v=FREEBSD91#L2506 > enum ieee80211_state ostate = (enum ieee80211_state) arg; > casting a pointer to an enum > > http://fxr.watson.org/fxr/source/net80211/ieee80211_output.c?v=FREEBSD91#L2519 > if (vap->iv_state == ostate) > So that, this test is always false -> callout_reset() will never be > called -> by the time the callout timer runs out, ni could be freed.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201303292250.r2TMo1qu060081>