samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

qcacmn: Free nbuf on bpr disabled case only

Browse Source 
If tx capture, sniffer are not enabled, mgmt nbuf is freed.
It is causing use-after-free in bpr enabled case
Added change to free only when bpr is disabled

Change-Id: Ia56254ca371cd9fbc21f5d58fac7ea96792d0bee
CRs-Fixed: 2663098
This commit is contained in:
Srinivas Pitla
2020-04-13 11:59:57 -07:00
committed by nshrivas
parent c4ae3d34b6
commit 34b51d3dcc
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
dp/wifi3.0/dp_htt.c
View File

@@ -3008,7 +3008,8 @@ void dp_deliver_mgmt_frm(struct dp_pdev *pdev, qdf_nbuf_t nbuf)
nbuf, HTT_INVALID_PEER, nbuf, HTT_INVALID_PEER,
WDI_NO_VAL, pdev->pdev_id); WDI_NO_VAL, pdev->pdev_id);
} else { } else {
qdf_nbuf_free(nbuf); if (!pdev->bpr_enable)
qdf_nbuf_free(nbuf);
} }
} }
#endif #endif