commit c78ee8151faa3259673dc49ffb6611bd3780bc1d
author Kaushik, Sushant <skaushik@qti.qualcomm.com> Fri Aug 01 12:21:19 2014 +0530
committer Satyanarayana Dash <c_sadash@qti.qualcomm.com> Tue Aug 05 11:22:31 2014 +0530
tree 73d867b821b77dcc09d5c6f753d1324384f9c7d4
parent 0acc3c44a9332247662f23628f7be52a7ae893db

wlan: Fix dangling pAdapter pointer in HDD.

On getting response from FW , SME calls hdd in
hdd_tx_per_hit_cb with pAdapter as argument.But
by that pAdapter in hdd might be removed.
As a part of fix, instead of passing pAdapter,
sessionId is passed. So when SME gets response from
FW , it will call hdd with sessionId and in hdd based
on sessionId a valid pAdapter would be used.

Change-Id: I008f8be1792a389839966487eaef99dd108d1c8c
CRs-Fixed: 699843

CORE/HDD/src/wlan_hdd_wext.c

diff --git a/CORE/HDD/src/wlan_hdd_wext.c b/CORE/HDD/src/wlan_hdd_wext.c
index e6aed4f..e9728e6 100644
--- a/CORE/HDD/src/wlan_hdd_wext.c
+++ b/CORE/HDD/src/wlan_hdd_wext.c
@@ -2398,7 +2398,7 @@
     unsigned char tx_fail[16];
     union iwreq_data wrqu;
 
-    if (NULL == pAdapter)
+    if (NULL == pAdapter || (WLAN_HDD_ADAPTER_MAGIC != pAdapter->magic))
     {
         hddLog(LOGE, "hdd_tx_per_hit_cb: pAdapter is NULL");
         return;