Commit c7ac2567 authored Oct 21, 2020 by Praveen Kurapati Committed by Gerrit - the friendly Code Review server Oct 30, 2020

msm: ipa: fix the use-after-free on qmi framework in ssr scenario



IPA drvier free the qmi server hdl without notify the qmi
framework which is causing the use-after-free on QMI framework.
The fix is to notify qmi framework before freeing the qmi handle.

Change-Id: I1ec9d3efd29283fddd958561a538b2995222a53c
Signed-off-by: Praveen Kurapati <pkurapat@codeaurora.org>
Signed-off-by: Bojun Pan <bojunp@codeaurora.org>

parent 0086d774

drivers/platform/msm/ipa/ipa_v3/ipa_qmi_service.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -1580,6 +1580,7 @@ static void ipa3_q6_clnt_svc_arrive(struct work_struct *work)
		IPAWANERR(
		"ipa3_qmi_init_modem_send_sync_msg failed due to SSR!\n");
		/* Cleanup when ipa3_wwan_remove is called */
		qmi_handle_release(ipa_q6_clnt);
		vfree(ipa_q6_clnt);
		ipa_q6_clnt = NULL;
		return;