In wma_vdev_delete_handler() once vdev req is removed from the vdev_resp_queue the vdev rsp timer is stopped and freed after releasing the wake lock and vdev detach callback. So before vdev rsp timer is stopped it may get expired and post msg in MC thread. Now once this timer msg is processed it access the already freed memory. To fix it stop vdev rsp timer first before releasing the wake lock and vdev detach callback. Change-Id: Iface6d1faaa9f801d0da7a70d548eafbd082dc48 CRs-Fixed: 2196338 |
||
---|---|---|
.. | ||
inc | ||
src |