1
0

qcacmn: Fix double free of frags

When decap type is invalid, freeing nbuf and while next monitor
buffer tlv picking last nbuf from queue. which has allocated frags
and valid data. expecting MPDU END TLV for previous mpdu
before monitor buffer tlv to allocate new nbuf.

Set rx_hdr_rcvd to false when we receive invalid decap type.

CRs-Fixed: 3503694
Change-Id: I97ede9e52df580769b78afc767ba9528914b3ea5
Este cometimento está contido em:
aloksing
2023-06-02 14:39:56 +05:30
cometido por Rahul Choudhary
ascendente 5ca9d1b8b4
cometimento a0805fb4d0

Ver ficheiro

@@ -1600,6 +1600,7 @@ uint8_t dp_rx_mon_process_tlv_status(struct dp_pdev *pdev,
dp_mon_err("Decap type invalid");
qdf_assert_always(0);
}
ppdu_info->rx_hdr_rcvd[user_id] = false;
return num_buf_reaped;
}