qcacmn: Remove thread unsafe ce_debug varialbes
The use of these static variables could lead to an skb
double free.
Change-Id: I42ebff2c5a713350922e21f4d581c3b8935507e3
CRs-Fixed: 2011773
diff --git a/hif/src/ce/ce_service.c b/hif/src/ce/ce_service.c
index 9c6a035..971849f 100644
--- a/hif/src/ce/ce_service.c
+++ b/hif/src/ce/ce_service.c
@@ -1203,12 +1203,6 @@
return nentries;
}
-/* Debug support */
-void *ce_debug_cmplrn_context; /* completed recv next context */
-void *ce_debug_cnclsn_context; /* cancel send next context */
-void *ce_debug_rvkrn_context; /* revoke receive next context */
-void *ce_debug_cmplsn_context; /* completed send next context */
-
/*
* Guts of ce_completed_recv_next.
* The caller takes responsibility for any necessary locking.
@@ -1267,9 +1261,9 @@
*per_CE_contextp = CE_state->recv_context;
}
- ce_debug_cmplrn_context = dest_ring->per_transfer_context[sw_index];
if (per_transfer_contextp) {
- *per_transfer_contextp = ce_debug_cmplrn_context;
+ *per_transfer_contextp =
+ dest_ring->per_transfer_context[sw_index];
}
dest_ring->per_transfer_context[sw_index] = 0; /* sanity */
@@ -1357,10 +1351,9 @@
*per_CE_contextp = CE_state->recv_context;
}
- ce_debug_rvkrn_context =
- dest_ring->per_transfer_context[sw_index];
if (per_transfer_contextp) {
- *per_transfer_contextp = ce_debug_rvkrn_context;
+ *per_transfer_contextp =
+ dest_ring->per_transfer_context[sw_index];
}
dest_ring->per_transfer_context[sw_index] = 0; /* sanity */
@@ -1452,10 +1445,9 @@
*per_CE_contextp = CE_state->send_context;
}
- ce_debug_cmplsn_context =
- src_ring->per_transfer_context[sw_index];
if (per_transfer_contextp) {
- *per_transfer_contextp = ce_debug_cmplsn_context;
+ *per_transfer_contextp =
+ src_ring->per_transfer_context[sw_index];
}
src_ring->per_transfer_context[sw_index] = 0; /* sanity */
@@ -1535,10 +1527,9 @@
*per_CE_contextp = CE_state->send_context;
}
- ce_debug_cnclsn_context =
- src_ring->per_transfer_context[sw_index];
if (per_transfer_contextp) {
- *per_transfer_contextp = ce_debug_cnclsn_context;
+ *per_transfer_contextp =
+ src_ring->per_transfer_context[sw_index];
}
src_ring->per_transfer_context[sw_index] = 0; /* sanity */