When we receive a packet from the network stack for transmission, we make a copy of this skb and free the shared skb before trying to trasnmit it. Currently the mac address used for tdls operations is taken as a pointer to the original skb, which gets freed after the skb_unshare. Copy the mac address into a local stack memory instead of using a pointer to the skb data to avoid the use-after-free condition. Change-Id: I9f0e6260476d5a41b7209a6a599f50a548b953b5 CRs-Fixed: 2733445 |
||
---|---|---|
.. | ||
inc | ||
src |