From c59b7a1c0c6c2cfc989aa7cba75bc9997a0ea86f Mon Sep 17 00:00:00 2001 From: Bala Venkatesh Date: Tue, 16 Apr 2019 16:58:28 +0530 Subject: [PATCH] qcacld-3.0: Free rx_mgmt in function tdls_process_rx_frame Currently, in function tdls_process_rx_frame. If vdev is NULL then rx_mgmt memory is not freed. Free the rx_mgmt memory before returning from function tdls_process_rx_frame. Change-Id: I5be27a7fa8a9417f578e406f3f9e8c7394439fa8 CRs-Fixed: 2436241 --- components/tdls/core/src/wlan_tdls_mgmt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/components/tdls/core/src/wlan_tdls_mgmt.c b/components/tdls/core/src/wlan_tdls_mgmt.c index 0df4b2ca20b5..0e5f58fd3d46 100644 --- a/components/tdls/core/src/wlan_tdls_mgmt.c +++ b/components/tdls/core/src/wlan_tdls_mgmt.c @@ -133,7 +133,6 @@ static QDF_STATUS tdls_process_rx_mgmt( else tdls_debug("rx mgmt, but no valid up layer callback"); - qdf_mem_free(rx_mgmt); return QDF_STATUS_SUCCESS; } @@ -163,6 +162,7 @@ QDF_STATUS tdls_process_rx_frame(struct scheduler_msg *msg) wlan_objmgr_vdev_release_ref(vdev, WLAN_TDLS_NB_ID); } + qdf_mem_free(tdls_rx->rx_mgmt); qdf_mem_free(msg->bodyptr); msg->bodyptr = NULL;