Re: OOPS at ieee80211_aes_ccm_encrypt()?

[Johannes Berg <johannes@sipsolutions.net>]

On Mon, 2011-01-03 at 00:10 +0200, Jussi Kivilinna wrote:

> While doing stress testing on zd1211rw AP-mode I run into this problem  
> that I don't think has that much to do with zd1211rw:

[snip]

> Is key being used after freeing?

It looks like it. Can you reproduce this fairly easily? I wonder if it's
an RCU problem, we do key lookups under RCU but I see no grace period
right now ... try the patch below, I'll look into it in more detail.

johannes

--- wireless-testing.orig/net/mac80211/key.c	2011-01-03 17:44:54.000000000 +0100
+++ wireless-testing/net/mac80211/key.c	2011-01-03 17:45:41.000000000 +0100
@@ -379,6 +379,8 @@ static void __ieee80211_key_destroy(stru
 	if (!key)
 		return;
 
+	synchronize_rcu();
+
 	if (key->local)
 		ieee80211_key_disable_hw_accel(key);