diff options
| author | Rajeev Kumar <rajekuma@qca.qualcomm.com> | 2014-02-16 21:38:02 -0800 |
|---|---|---|
| committer | Akash Patel <c_akashp@qca.qualcomm.com> | 2014-02-18 01:00:28 -0800 |
| commit | 71c4ca81fdfb8f52dde1d793bc409cb12ac0573b (patch) | |
| tree | b05f4d89983cb5da9eea386f2c9f563583c7bb7a | |
| parent | d9b47e66704e54dcd987c042fcf3ea6a7bd286bf (diff) | |
qcacld: Fix of double free panic in wma_vdev_start_resp_handler
wma_vdev_start_resp_handler() is freeing req_msg using vos_mem_free
where as req_msg was allocated memory using adf_os_mem_alloc() in add
bss request message handler in WMA. Fixing the wrong API usage to fix
double free panic in SLUB debug enabled driver
Change-Id: I72de9278b5d02e23a7ec16453e37cd4ae0a18ba5
Rs-fixed: 617714
| -rw-r--r-- | CORE/SERVICES/WMA/wma.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/CORE/SERVICES/WMA/wma.c b/CORE/SERVICES/WMA/wma.c index 37f88576e973..53c699254f94 100644 --- a/CORE/SERVICES/WMA/wma.c +++ b/CORE/SERVICES/WMA/wma.c @@ -581,7 +581,7 @@ static int wma_vdev_start_resp_handler(void *handle, u_int8_t *cmd_param_info, wma_vdev_start_rsp(wma, bssParams, resp_event); } vos_timer_destroy(&req_msg->event_timeout); - vos_mem_free(req_msg); + adf_os_mem_free(req_msg); return 0; } |