wlan: Resolve accessing free object while processing scan done callback
During interface down, kernel invokes cfg80211_scan_done() to free
kernel allocated scan request(scan_req) object. If scan_done callback
is invoked during interface down(or vice-versa), then there is a
possibility of driver to dereference scan_req object after it's freed,
while updating last_scan_channelList.
To resolve the race condition, update last_scan_channellist on receiving
scan request itself.
Change-Id: Iad2619cd967f213d9450295bc07549c75f69eaf8
CRs-Fixed: 2181016
2 files changed