A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-12 07:37:31 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Fix use after free of HDD context

Browse source 
HDD context is freed as part of wiphy_free() kernel API call
and after it any access of HDD context member variable will
lead to use after panic. Make sure to destroy iface change
mutex before HDD context is freed as part of wiphy_free.

Change-Id: Ic447501c8c7faad7cc7322e5fdb112cb74e5d7ad
CRs-Fixed: 2169505
This commit is contained in:
Rajeev Kumar 2018-01-09 14:12:41 -08:00 • committed by snandini
commit fa55a6954b
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
core/hdd/src/wlan_hdd_main.c
View file

@ -8220,8 +8220,8 @@ err_free_config:
qdf_mem_free(hdd_ctx->config);
err_free_hdd_context:
wiphy_free(hdd_ctx->wiphy);
mutex_destroy(&hdd_ctx->iface_change_lock);
wiphy_free(hdd_ctx->wiphy);
err_out:
return ERR_PTR(ret);