If SSR during sme close session when interface down and vdev destroy, qdf_session_close_event is completed forcely before peer detached, vdev becomes LOGICALLY_DELETED instead of destroyed actually for peer ref count is held. When bss is deleted and eWNI_SME_JOIN_RSP is handled, is_disconnect_pending-> csr_nonscan_pending_ll_next is called, wlan_objmgr_get_vdev_by_id_from_psoc return NULL, cmd.vdev is NULL, NULL pointer dereference will happen. Change-Id: I790a12483c2b9f967da9ced387935f93a6168e81 CRs-Fixed: 2316960 |
||
---|---|---|
.. | ||
bmi | ||
cds | ||
dp | ||
hdd | ||
mac | ||
pld | ||
sap | ||
sme | ||
wma |