android_kernel_xiaomi_sm8350/core/dp/txrx
Rakesh Pillai 33942c4344 qcacld-3.0: Fix Use-After-Free in ol_txrx_pdev_detach
The use TAILQ_FOREACH for freeing the fw_stats list during
pdev detach causes a use-after-free condition, which can lead
to unexpected behavior during the driver load or unload.

Fix the possible Use-after-free condition in pdev detach, by
using TAILQ_FOREACH_SAFE instead of TAILQ_FOREACH for freeing
the fw_stats list.

CRs-Fixed: 2214520
Change-Id: I5dfcc5e3f0d2e77a5f6226eca06bc6ab1af4e643
2018-05-15 03:21:22 -07:00
..
ipv6_defs.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_cfg.c qcacld-3.0: Fix typo "diable" 2018-05-12 04:30:06 -07:00
ol_ctrl_txrx_api.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_osif_txrx_api.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_rx_defrag.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_rx_defrag.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_rx_fwd.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_rx_fwd.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_rx_pn.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_rx_pn.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_rx_reorder_timeout.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_rx_reorder_timeout.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_rx_reorder.c qcacld-3.0: Fix typo "seperate" 2018-05-12 04:28:53 -07:00
ol_rx_reorder.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_rx.c qcacld-3.0: Fix typo "seperate" 2018-05-12 04:28:53 -07:00
ol_rx.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx_classify.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx_classify.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx_desc.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx_desc.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx_queue.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx_queue.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx_sched.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx_sched.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx_send.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx_send.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_tx.c qcacld-3.0: add DPTRACE Enhancements - Phase 2 2018-05-03 04:43:30 -07:00
ol_tx.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_txrx_encap.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_txrx_encap.h qcacld-3.0: Fix typo "capabilites" 2018-05-09 16:31:19 -07:00
ol_txrx_event.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_txrx_flow_control.c qcacld-3.0: Fix typos "sucess" and "sucessful" 2018-05-09 16:31:15 -07:00
ol_txrx_internal.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_txrx_ipa.c qcacld-3.0: Fix wlan_ipa_set_perf_level failure for UNIFIED_WDI_API 2018-05-02 19:47:55 -07:00
ol_txrx_ipa.h qcacld-3.0: Add frag_header to support pre-wdi2.0 platform 2018-04-18 22:03:28 -07:00
ol_txrx_peer_find.c qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_txrx_peer_find.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
ol_txrx_types.h qcacld-3.0: Fix typo "recieve" 2018-05-12 04:30:02 -07:00
ol_txrx.c qcacld-3.0: Fix Use-After-Free in ol_txrx_pdev_detach 2018-05-15 03:21:22 -07:00
ol_txrx.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
txrx.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
wdi_event_api.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00
wdi_event.h qcacld-3.0: dp: Remove legacy markings 2018-04-24 14:48:38 -07:00