hdd_ipa_uc_loaded_uc_cb() allocates a msg buffer and passes it to workqueue handler. Both hdd_ipa_uc_loaded_uc_cb() and workqueue handler free the msg buffer, which leads to wrong memory dereference. Fix is to return directly in hdd_ipa_uc_loaded_uc_cb() and let workqueue handler free the msg buffer. Change-Id: I842700e7fe94dc9a77fba966d918a054bc79f36a CRs-Fixed: 2069189 |
||
---|---|---|
.. | ||
inc | ||
src |