)]}'
{
  "commit": "cd87a2d3a33d75a646f1aa1aa2ee5bf712d6f963",
  "tree": "45709536e1c4f36c345b16f90849c7833d23337b",
  "parents": [
    "df6d02300f7c2fbd0fbe626d819c8e5237d72c62"
  ],
  "author": {
    "name": "Johannes Berg",
    "email": "johannes.berg@intel.com",
    "time": "Fri Sep 24 11:20:47 2010 +0200"
  },
  "committer": {
    "name": "John W. Linville",
    "email": "linville@tuxdriver.com",
    "time": "Fri Sep 24 15:21:55 2010 -0400"
  },
  "message": "mac80211: fix use-after-free\n\ncommit 8c0c709eea5cbab97fb464cd68b06f24acc58ee1\nAuthor: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nDate:   Wed Nov 25 17:46:15 2009 +0100\n\n    mac80211: move cmntr flag out of rx flags\n\nmoved the CMTR flag into the skb\u0027s status, and\nin doing so introduced a use-after-free -- when\nthe skb has been handed to cooked monitors the\nstatus setting will touch now invalid memory.\n\nAdditionally, moving it there has effectively\ndiscarded the optimisation -- since the bit is\nonly ever set on freed SKBs, and those were a\ncopy, it could never be checked.\n\nFor the current release, fixing this properly\nis a bit too involved, so let\u0027s just remove the\nproblematic code and leave userspace with one\ncopy of each frame for each virtual interface.\n\nCc: stable@kernel.org [2.6.33+]\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "fa0f37e4afe4901226b0ccd668ae6a88c136eeb2",
      "old_mode": 33188,
      "old_path": "net/mac80211/rx.c",
      "new_id": "28624282c5f36ad5bed8f74c0e8bf7df42ee2d6c",
      "new_mode": 33188,
      "new_path": "net/mac80211/rx.c"
    }
  ]
}