5ab5180d9e
Presently in the driver, in function hdd_objmgr_create_and_store_vdev the vdev object is created and stored. In case the creation of the vdev fails due to some reason, the corresponding error condition tries to free the osif_priv pointer. This osif_free pointer is actually already freed as a part of vdev_obj_delete -> vdev_release_ref -> vdev_obj_free. As this is already freed, a possible double free scenario can occur in the original error handling scenario. To avoid this scenario, do not free the osif_priv pointer in the error handling as it is already taken care in the caller. Change-Id: I7fc7be187ce1e303c81da885a75c600a7b6c4b3e CRs-Fixed: 2507432 |
||
|---|---|---|
| .. | ||
| bmi | ||
| cds | ||
| dp | ||
| hdd | ||
| mac | ||
| pld | ||
| sap | ||
| sme | ||
| wma | ||