A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-12 15:49:17 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Reset global saved command to avoid double free

Browse source 
Reset the global saved scan command to avoid double free.
In sme_process_set_hw_mode_resp(), after freeing the local
saved_cmd pointer, the global mac->sme.saved_scan_cmd is
not reset to NULL. This ends up in double free in
csr_scan_complete()->csr_handle_nxt_cmd() where we are
still holding a stale pointer.

CRs-Fixed: 941130
Change-Id: Ibb93b8d8e601936c7996518f21646e2c140cbd20
This commit is contained in:
Chandrasekaran, Manishekar 2015-11-19 09:57:58 +05:30 • committed by Prakash Dhavali
commit 19c6cb5282
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
core/sme/src/common/sme_api.c
View file

@ -228,6 +228,7 @@ static CDF_STATUS sme_process_set_hw_mode_resp(tpAniSirGlobal mac, uint8_t *msg)
if (saved_cmd) {
cdf_mem_free(saved_cmd);
saved_cmd = NULL;
mac->sme.saved_scan_cmd = NULL;
}
} else {
sms_log(mac, LOGE,