---

yaml
---
r: 258511
b: refs/heads/master
c: a401d2b
h: refs/heads/master
i:
  258509: ec1e904
  258507: fb32930
  258503: f5eaa97
  258495: afa884c
v: v3

[refs]

@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 70126f6105f86366fd97644937ef2180b906b7c8
+refs/heads/master: a401d2bb363d942245acdd81c5b5a754011696ee

trunk/net/wireless/nl80211.c

@@ -3454,7 +3454,9 @@ static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
 	}
 
 	for (i = 0; i < IEEE80211_NUM_BANDS; i++)
-		request->rates[i] = (1 << wiphy->bands[i]->n_bitrates) - 1;
+		if (wiphy->bands[i])
+			request->rates[i] =
+				(1 << wiphy->bands[i]->n_bitrates) - 1;
 
 	if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
 		nla_for_each_nested(attr,

trunk/net/wireless/scan.c

@@ -863,7 +863,8 @@ int cfg80211_wext_siwscan(struct net_device *dev,
 	}
 
 	for (i = 0; i < IEEE80211_NUM_BANDS; i++)
-		creq->rates[i] = (1 << wiphy->bands[i]->n_bitrates) - 1;
+		if (wiphy->bands[i])
+			creq->rates[i] = (1 << wiphy->bands[i]->n_bitrates) - 1;
 
 	rdev->scan_req = creq;
 	err = rdev->ops->scan(wiphy, dev, creq);

trunk/net/wireless/util.c

@@ -1013,6 +1013,9 @@ int ieee80211_get_ratemask(struct ieee80211_supported_band *sband,
 {
 	int i, j;
 
+	if (!sband)
+		return -EINVAL;
+
 	if (n_rates == 0 || n_rates > NL80211_MAX_SUPP_RATES)
 		return -EINVAL;