qcacld-3.0: fix invalid accessing to freed in_ifaddr
The in_ifaddr in in_dev->ifa_list which stores IP info is freed maybe due to lifetime hit/wlan interface re-connect, etc. In the meantime, lot ARP request frame is pending in DP RX thread and still try to do local ARP check in function hdd_is_arp_local(), this function will go through in_dev->ifa_list but no lock protection, use after free happened due to race condition. Add lock protection in hdd_is_arp_local(). Change-Id: Iaa97d445d3c4c0b79b5b9f63362df2601f62af5b CRs-Fixed: 2751469
Loading
Please register or sign in to comment