Looking through the changelog for the wireless driver (assuming this is drivers/net/wireless/iwlwifi/iwl-agn and friends) didn't seem helpful. At this point I'm afraid the most likely path to figuring this out would be to take the upstream kernel, reproduce it on there, and then bisect from 2.6.35 to git head to find the offensive commit.
Looking through the changelog for the wireless driver (assuming this is drivers/ net/wireless/ iwlwifi/ iwl-agn and friends) didn't seem helpful. At this point I'm afraid the most likely path to figuring this out would be to take the upstream kernel, reproduce it on there, and then bisect from 2.6.35 to git head to find the offensive commit.