A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-10 22:40:54 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Refine peer object cleanup sequence

Browse source 
When a peer object is to be removed in WLAN HDD object manager
code, it should be logically deleted first before it's ref
count is decreased and the peer object is freed, or there will
be a potential race condition, in which a freed peer object
buffer will be accessed.

Change-Id: Ib3179e8207d1e9bbaa9c2b8450a8016e23cfc3f3
CRs-Fixed: 2161627
This commit is contained in:
wadesong 2017-12-20 15:28:34 +08:00 • committed by snandini
commit db4d958ba4
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
core/hdd/src/wlan_hdd_object_manager.c
View file

@ -346,11 +346,11 @@ int hdd_objmgr_remove_peer_object(struct wlan_objmgr_vdev *vdev,
peer = wlan_objmgr_get_peer(psoc, mac_addr, WLAN_HDD_ID_OBJ_MGR);
if (peer) {
wlan_objmgr_peer_obj_delete(peer);
/* Unref to decrement ref happened in find_peer */
wlan_objmgr_peer_release_ref(peer, WLAN_HDD_ID_OBJ_MGR);
wlan_objmgr_peer_obj_delete(peer);
hdd_info("Peer obj "MAC_ADDRESS_STR" deleted",
MAC_ADDR_ARRAY(mac_addr));
return 0;