浏览代码

qcacmn: Fix double free of frags

When decap type is invalid, freeing nbuf and while next monitor
buffer tlv picking last nbuf from queue. which has allocated frags
and valid data. expecting MPDU END TLV for previous mpdu
before monitor buffer tlv to allocate new nbuf.

Set rx_hdr_rcvd to false when we receive invalid decap type.

CRs-Fixed: 3503694
Change-Id: I97ede9e52df580769b78afc767ba9528914b3ea5
aloksing 2 年之前
父节点
当前提交
a0805fb4d0
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      dp/wifi3.0/monitor/2.0/dp_rx_mon_2.0.c

+ 1 - 0
dp/wifi3.0/monitor/2.0/dp_rx_mon_2.0.c

@@ -1600,6 +1600,7 @@ uint8_t dp_rx_mon_process_tlv_status(struct dp_pdev *pdev,
 				dp_mon_err("Decap type invalid");
 				qdf_assert_always(0);
 			}
+			ppdu_info->rx_hdr_rcvd[user_id] = false;
 			return num_buf_reaped;
 		}