Avraham Stern 7d8fbf3db1 mac80211: flush hw_roc_start work before cancelling the ROC ... commit 6e46d8ce89 upstream. When HW ROC is supported it is possible that after the HW notified that the ROC has started, the ROC was cancelled and another ROC was added while the hw_roc_start worker is waiting on the mutex (since cancelling the ROC and adding another one also holds the same mutex). As a result, the hw_roc_start worker will continue to run after the new ROC is added but before it is actually started by the HW. This may result in notifying userspace that the ROC has started before it actually does, or in case of management tx ROC, in an attempt to tx while not on the right channel. In addition, when the driver will notify mac80211 that the second ROC has started, mac80211 will warn that this ROC has already been notified. Fix this by flushing the hw_roc_start work before cancelling an ROC. Signed-off-by: Avraham Stern <avraham.stern@intel.com> Signed-off-by: Luca Coelho <luciano.coelho@intel.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2017-10-05 09:41:44 +02:00
..
6lowpan
9p	p9_client_readdir() fix	2017-05-02 21:19:55 -07:00
802
8021q	vlan: Propagate MAC address to VLANs	2017-08-06 19:19:43 -07:00
appletalk
atm
ax25	ax25: Fix segfault after sock connection timeout	2017-02-04 09:45:09 +01:00
batman-adv	batman-adv: Check for alloc errors when preparing TT local data	2016-12-15 08:49:23 -08:00
bluetooth	Bluetooth: Properly check L2CAP config option output buffer length	2017-09-13 14:09:46 -07:00
bridge	net: bridge: start hello timer only if device is up	2017-06-14 13:16:19 +02:00
caif	net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx	2017-07-05 14:37:14 +02:00
can	can: Fix kernel panic at security_sock_rcv_skb	2017-02-18 16:39:26 +01:00
ceph	libceph: force GFP_NOIO for socket allocations	2017-04-08 09:53:30 +02:00
core	net: avoid skb_warn_bad_offload false positives on UFO	2017-08-12 19:29:08 -07:00
dcb
dccp	dccp: defer ccid_hc_tx_delete() at dismantle time	2017-08-30 10:19:18 +02:00
decnet	decnet: always not take dst->__refcnt when inserting dst into hash table	2017-07-05 14:37:14 +02:00
dns_resolver	net: dns_resolver: convert time_t to time64_t	2015-11-18 16:27:46 -05:00
dsa	net: dsa: Check return value of phy_connect_direct()	2017-07-05 14:37:19 +02:00
ethernet	net: introduce device min_header_len	2017-02-18 16:39:27 +01:00
hsr	net/hsr: fix a warning message	2015-11-23 14:56:15 -05:00
ieee802154	Revert "net: fix percpu memory leaks"	2017-09-27 11:00:11 +02:00
ipv4	Revert "net: fix percpu memory leaks"	2017-09-27 11:00:11 +02:00
ipv6	ipv6: fix typo in fib6_net_exit()	2017-09-27 11:00:12 +02:00
ipx	ipx: call ipxitf_put() in ioctl error path	2017-05-25 14:30:13 +02:00
irda	irda: do not leak initialized list.dev to userspace	2017-08-30 10:19:21 +02:00
iucv	af_iucv: Validate socket address length in iucv_sock_bind()	2016-03-03 15:07:03 -08:00
key	af_key: do not use GFP_KERNEL in atomic contexts	2017-08-30 10:19:18 +02:00
l2tp	l2tp: fix PPP pseudo-wire auto-loading	2017-05-02 21:19:52 -07:00
l3mdev
lapb
llc	net/llc: avoid BUG_ON() in skb_orphan()	2017-02-26 11:07:49 +01:00
mac80211	mac80211: flush hw_roc_start work before cancelling the ROC	2017-10-05 09:41:44 +02:00
mac802154
mpls	mpls: Send route delete notifications when router module is unloaded	2017-03-22 12:04:16 +01:00
netfilter	netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregister	2017-08-24 17:02:34 -07:00
netlabel	netlabel: add address family checks to netlbl_{sock,req}_delattr()	2016-08-20 18:09:22 +02:00
netlink	netlink: Allow direct reclaim for fallback allocation	2017-05-08 07:46:02 +02:00
netrom
nfc	NFC: Add sockaddr length checks before accessing sa_family in bind handlers	2017-07-27 15:06:03 -07:00
openvswitch	openvswitch: fix potential out of bound access in parse_ct	2017-08-11 09:08:53 -07:00
packet	packet: fix tp_reserve race in packet_set_ring	2017-08-12 19:29:08 -07:00
phonet	phonet: properly unshare skbs in phonet_rcv()	2016-01-31 11:29:00 -08:00
rds	rds: tcp: use sock_create_lite() to create the accept socket	2017-07-21 07:44:55 +02:00
rfkill	rfkill: fix rfkill_fop_read wait_event usage	2016-03-03 15:07:26 -08:00
rose
rxrpc	rxrpc: Fix several cases where a padded len isn't checked in ticket decode	2017-06-29 12:48:52 +02:00
sched	net: sched: fix NULL pointer dereference when action calls some targets	2017-08-30 10:19:21 +02:00
sctp	sctp: fully initialize the IPv6 address in sctp_v6_to_addr()	2017-08-30 10:19:19 +02:00
sunrpc	SUNRPC: fix refcounting problems with auth_gss messages.	2017-04-21 09:30:08 +02:00
switchdev	switchdev: pass pointer to fib_info instead of copy	2016-06-24 10:18:16 -07:00
tipc	tipc: fix use-after-free	2017-08-30 10:19:20 +02:00
unix	af_unix: Add sockaddr length checks before accessing sa_family in bind and connect handlers	2017-07-05 14:37:13 +02:00
vmw_vsock	VSOCK: Detach QP check should filter out non matching QPs.	2017-04-27 09:09:32 +02:00
wimax
wireless	cfg80211: Check if PMKID attribute is of expected size	2017-07-21 07:44:56 +02:00
x25	net: fix a kernel infoleak in x25 module	2016-05-18 17:06:43 -07:00
xfrm	xfrm: policy: check policy direction value	2017-09-07 08:34:09 +02:00
compat.c
Kconfig
Makefile
socket.c	net: socket: fix recvmmsg not returning error from sock_error	2017-02-26 11:07:50 +01:00
sysctl_net.c	net: Use ns_capable_noaudit() when determining net sysctl permissions	2016-09-15 08:27:50 +02:00