On Thursday, June 16, 2011 12:32:24 AM Antonio Quartulli wrote:
In recv_roam_adv(), in case of error the skb is freed and then NET_RX_DROP is returned. This makes the caller function wrongly invoke kfree_skb() again. To avoid this double free recv_tt_query() has to always return NET_RX_DROP and not to free the skb.
Applied in revision ad0432c.
Thanks, Marek