tree 5b4f95d4c8f2535d5971aaff0cde15a96695a1f1
parent a73228124bed4022d4d4c5663d9679ba2fb99c6c
author Nikolay Martynov <mar.kolya@gmail.com> 1322468280 +0100
committer John W. Linville <linville@tuxdriver.com> 1322506001 -0500

mac80211: fix race condition caused by late addBA response

If addBA responses comes in just after addba_resp_timer has
expired mac80211 will still accept it and try to open the
aggregation session. This causes drivers to be confused and
in some cases even crash.

This patch fixes the race condition and makes sure that if
addba_resp_timer has expired addBA response is not longer
accepted and we do not try to open half-closed session.

Cc: stable@vger.kernel.org
Signed-off-by: Nikolay Martynov <mar.kolya@gmail.com>
[some adjustments]
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: John W. Linville <linville@tuxdriver.com>