tree 50b7eb0d61382995571a47a59fb5961cfaba0123
parent 29e17e6078ff24bc8f069c6de8b8b230d425476b
author Mahesh A Saptasagar <msapta@codeaurora.org> 1418626011 +0530
committer Gerrit - the friendly Code Review server <code-review@localhost> 1418913393 -0800

wlan: Address memory corruption due to double free

If MC thread fails to post any WDI message over bus then failure
status is sent to the caller through registered request callback
and WDI_STATUS_PENDING is returned to the actual request funcion
to avoid repeated functionality done in the request callback for
failure case. But the commit "Reload driver if EXIT IMPS REQ fails
due to invalid SMD port" will modify the wdiStatus which results
in double free, i.e both WDA request and WDA request status callback
functions endup in freeing the same memory.

To mitigate this issue, return WDI_STATUS_PENDING to the request
function if we already returned WDI_STATUS_DEV_INTERNAL_FAILURE
or WDI_STATUS_E_FAILURE status through registered request callback.
And also handle the logic to reload the wlan driver if WDI_EXIT_IMPS
REQ fails due to closed SMD port in request callback function.

Change-Id: I932e6684c4272332c2b14cc4896b7c00c86fa4cd
CRs-Fixed: 767711