Fix use-after-free in wifi_cleanup()

am: 2ce1c4952d

* commit '2ce1c4952d871f2baad0bc69dd8500f830f43db4':
  Fix use-after-free in wifi_cleanup()

diff --cc bcmdhd/wifi_hal/wifi_hal.cpp
index 28f5565,982702a..fdb7d7b
--- 1/bcmdhd/wifi_hal/wifi_hal.cpp
--- 2/bcmdhd/wifi_hal/wifi_hal.cpp
+++ b/bcmdhd/wifi_hal/wifi_hal.cpp
@@@ -335,12 -310,12 +335,12 @@@ void wifi_cleanup(wifi_handle handle, w
              pthread_mutex_unlock(&info->cb_lock);
              cmd->cancel();
              pthread_mutex_lock(&info->cb_lock);
-             /* release reference added when command is saved */
-             cmd->releaseRef();
              if (num_cmd == info->num_cmd) {
 -                ALOGE("Cancelling command %p:%s did not work", cmd, cmd->getType());
 +                ALOGI("Cancelling command %p:%s did not work", cmd, (cmd ? cmd->getType(): ""));
                  bad_commands++;
              }
+             /* release reference added when command is saved */
+             cmd->releaseRef();
          }
      }