if there is an error then routine lbs_process_rxed_packet in rx.c does not free the skb.
signed off by: [email protected]
--- linux-2.6.29/drivers/net/wireless/libertas/rx.c.old 2009-04-01 13:19:26.000000000 -0700
+++ linux-2.6.29/drivers/net/wireless/libertas/rx.c 2009-04-01 13:19:57.000000000 -0700
@@ -170,6 +170,7 @@
lbs_deb_rx("rx err: frame received with bad length\n");
priv->stats.rx_length_errors++;
ret = 0;
+ dev_kfree_skb(skb);
goto done;
}
@@ -181,6 +182,7 @@
lbs_pr_alert("rxpd not ok\n");
priv->stats.rx_errors++;
ret = 0;
+ dev_kfree_skb(skb);
goto done;
}