Cen Zhang 158438cd6a
wifi: mac80211_hwsim: avoid NULL skb in stop queue drain ...
mac80211_hwsim_stop() drops any frames left in data->pending. The loop
currently checks skb_queue_empty() and then dequeues separately.
That split is racy with TX status handling, which can remove a pending
frame under the queue lock. If the last entry is removed after the empty
check, skb_dequeue() returns NULL and the stop path passes that NULL skb
to ieee80211_free_txskb().
Use skb_dequeue() as the loop condition instead. The dequeue result is the
object that stop owns and frees, and a concurrent status completion that
empties the queue simply makes the loop terminate.
Fixes: bd18de5179zzzccc427@gmail.com >
Link: https://patch.msgid.link/20260706161822.921039-1-zzzccc427@gmail.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com >
2026-07-07 10:16:20 +02:00
2026-06-26 17:03:48 -07:00
2026-06-26 13:00:10 -07:00
2026-06-01 18:10:34 +02:00
2026-06-18 08:12:50 -07:00
2026-06-16 08:53:53 -07:00
2026-06-26 10:47:26 -07:00
2026-06-26 16:15:53 -07:00
2026-06-11 14:24:42 -04:00
2026-06-22 12:20:21 -07:00
2026-06-17 11:54:57 -07:00
2026-06-25 09:00:53 -07:00
2026-06-25 12:48:57 -07:00
2026-06-15 13:57:13 +05:30
2026-06-01 18:10:34 +02:00
2026-06-08 21:26:09 +02:00
2026-06-18 20:53:00 -07:00
2026-06-23 14:00:29 +02:00
2026-06-24 12:48:43 -07:00
2026-06-12 13:47:53 -07:00
2026-06-19 10:14:34 -07:00
2026-06-24 12:48:43 -07:00
2026-06-17 10:21:00 +01:00
2026-06-13 13:24:34 -07:00
2026-06-13 11:10:23 +09:00
2026-06-22 12:20:21 -07:00
2026-06-01 12:29:40 +08:00
2026-06-23 10:44:29 +02:00
2026-06-26 17:03:48 -07:00
2026-06-18 20:53:00 -07:00
2026-06-22 08:06:13 -07:00
2026-06-29 16:37:43 -07:00
2026-06-08 21:51:12 -05:00
2026-06-22 12:20:21 -07:00
2026-06-23 17:53:08 +02:00
2026-06-16 23:19:45 +02:00
2026-06-15 15:08:14 +05:30
2026-06-22 12:20:21 -07:00
2026-06-18 08:16:21 -07:00
2026-06-26 22:42:56 -07:00
2026-06-25 12:48:57 -07:00
2026-06-22 08:06:13 -07:00
2026-06-23 16:02:03 -07:00
2026-06-18 14:45:08 -07:00
2026-06-02 21:27:25 +02:00
2026-06-20 21:18:39 -05:00
2026-06-25 09:56:47 -07:00
2026-06-18 17:21:54 -07:00
2026-06-17 11:21:40 -07:00
2026-06-18 14:26:29 -07:00
2026-06-24 12:48:43 -07:00
2026-06-16 13:02:47 +05:30
2026-06-21 12:25:17 -07:00
2026-07-07 10:16:20 +02:00
2026-06-11 20:24:47 +02:00
2026-06-28 07:46:12 -07:00
2026-06-18 16:27:58 -07:00
2026-06-25 09:56:47 -07:00
2026-06-05 17:18:58 +02:00
2026-06-24 07:56:55 -05:00
2026-06-24 12:48:43 -07:00
2026-06-03 20:50:24 +01:00
2026-06-23 15:41:48 -07:00
2026-06-18 15:03:21 -07:00
2026-06-27 11:00:18 -07:00
2026-06-15 21:12:35 +02:00
2026-06-25 09:20:26 -07:00
2026-06-01 19:55:32 +02:00
2026-06-02 11:39:58 +02:00
2026-06-17 11:38:38 +01:00
2026-06-27 13:48:12 -07:00
2026-06-21 13:20:19 -07:00
2026-06-16 05:31:01 +05:30
2026-06-26 11:07:26 -07:00
2026-06-08 21:53:51 -05:00
2026-06-16 05:18:04 +05:30
2026-06-20 23:31:15 -07:00
2026-06-27 11:00:18 -07:00
2026-06-22 07:43:48 -07:00
2026-06-21 13:20:19 -07:00
2026-06-05 17:19:51 +02:00
2026-06-17 11:21:40 -07:00
2026-06-27 12:15:23 -07:00
2026-06-26 11:18:49 -07:00
2026-06-22 12:43:16 -07:00
2026-06-15 21:01:30 -04:00
2026-06-17 11:21:40 -07:00
2026-06-26 13:24:59 -07:00
2026-06-22 12:09:47 -07:00
2026-06-22 11:51:49 -07:00
2026-06-21 10:29:45 -07:00
2026-06-22 12:09:47 -07:00
2026-06-10 02:17:00 -04:00
2026-06-10 14:33:05 -06:00
2026-06-21 13:20:19 -07:00
2026-06-26 15:12:45 +02:00
2026-06-22 12:20:21 -07:00
2026-06-17 11:49:00 -07:00
2026-06-08 21:37:56 +02:00
2026-06-16 08:04:24 +05:30
2026-06-17 11:54:57 -07:00
158438cd6a