6c80c39d9a
If iwl_scan_initiate() fails for any reason,
priv->scan_request and priv->scan_vif are left
dangling. This can lead to a crash later when
iwl_bg_scan_completed() tries to run a pending
scan request.
In practice, this seems to be very rare due to
the STATUS_SCANNING check earlier. That check,
however, is wrong -- it should allow a scan to
be queued when a reset/roc scan is going on.
When a normal scan is already going on, a new
one can't be issued by mac80211, so that code
can be removed completely. I introduced this
bug when adding off-channel support in commit
|
||
|---|---|---|
| .. | ||
| iwl-1000.c | ||
| iwl-2000.c | ||
| iwl-5000-hw.h | ||
| iwl-5000.c | ||
| iwl-6000-hw.h | ||
| iwl-6000.c | ||
| iwl-agn-calib.c | ||
| iwl-agn-calib.h | ||
| iwl-agn-eeprom.c | ||
| iwl-agn-hw.h | ||
| iwl-agn-lib.c | ||
| iwl-agn-rs.c | ||
| iwl-agn-rs.h | ||
| iwl-agn-rxon.c | ||
| iwl-agn-sta.c | ||
| iwl-agn-tt.c | ||
| iwl-agn-tt.h | ||
| iwl-agn-tx.c | ||
| iwl-agn-ucode.c | ||
| iwl-agn.c | ||
| iwl-agn.h | ||
| iwl-bus.h | ||
| iwl-commands.h | ||
| iwl-core.c | ||
| iwl-core.h | ||
| iwl-csr.h | ||
| iwl-debug.h | ||
| iwl-debugfs.c | ||
| iwl-dev.h | ||
| iwl-devtrace.c | ||
| iwl-devtrace.h | ||
| iwl-eeprom.c | ||
| iwl-eeprom.h | ||
| iwl-fh.h | ||
| iwl-helpers.h | ||
| iwl-io.c | ||
| iwl-io.h | ||
| iwl-led.c | ||
| iwl-led.h | ||
| iwl-pci.c | ||
| iwl-power.c | ||
| iwl-power.h | ||
| iwl-prph.h | ||
| iwl-rx.c | ||
| iwl-scan.c | ||
| iwl-sta.c | ||
| iwl-sta.h | ||
| iwl-sv-open.c | ||
| iwl-testmode.h | ||
| iwl-trans-int-pcie.h | ||
| iwl-trans-rx-pcie.c | ||
| iwl-trans-tx-pcie.c | ||
| iwl-trans.c | ||
| iwl-trans.h | ||
| Kconfig | ||
| Makefile | ||