brcmfmac: fix double free of p2pdev interface
authorArend van Spriel <arend@broadcom.com>
Mon, 15 Jun 2015 20:48:38 +0000 (22:48 +0200)
committerKalle Valo <kvalo@codeaurora.org>
Tue, 16 Jun 2015 08:35:09 +0000 (11:35 +0300)
commitcb700df8c8a62061b573322c4d0b292a9010aa3c
tree9420f39ae901a04f23a76eaa1c4876ef3e68911f
parent323d8f1be18e7cef53027c24e46308900dc7a90c
brcmfmac: fix double free of p2pdev interface

When freeing the driver ifp pointer it should also be removed from
the driver interface list, which is what brcmf_remove_interface()
does. Otherwise, the ifp pointer will be freed twice triggering
a kernel oops.

Fixes: f37d69a4babc ("brcmfmac: free ifp for non-netdev interface in p2p module")
Reviewed-by: Pieter-Paul Giesberts <pieterpg@broadcom.com>
Reviewed-by: Hante Meuleman <meuleman@broadcom.com>
Signed-off-by: Arend van Spriel <arend@broadcom.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
drivers/net/wireless/brcm80211/brcmfmac/p2p.c