qcacld-3.0: Fix use after free of pCurRoamProfile
Currently there is a chance that driver can access pCurRoamProfile
even after freeing it. While driver frees pCurRoamProfile as part of
csr_roam_process_command in mc thread context/user space context(if
there is no active command in sme queue), it can access the same
variable as part of __wlan_hdd_cfg80211_set_ext_roam_params in user
space context and can result in use after free.
Acquire lock before freeing roam profile to fix this issue.
Change-Id: I16863f35405fa41424060bb2d12c779681095a85
CRs-Fixed: 2265905
1 file changed