From 1eb137ef94335ed72ee6cac7b34126aa5bffe4c4 Mon Sep 17 00:00:00 2001 From: Lihua Liu Date: Tue, 23 Apr 2019 10:13:16 +0800 Subject: [PATCH] qcacld-3.0: Add setup for peer when LFR3 roaming is triggered Peer is created but not setup in LFR3 roaming case, then peer->rx_tid[tid].array is not initialized with a valid value before using,which cause null point dereference in dp_rx_defrag_cleanup() when cleaning up peer. Change-Id: Ia8fd7773041511f3865d8ba26f4844d9b33bcec0 CRs-Fixed: 2436112 --- core/wma/src/wma_dev_if.c | 1 + 1 file changed, 1 insertion(+) diff --git a/core/wma/src/wma_dev_if.c b/core/wma/src/wma_dev_if.c index aac115ccafdc..98ab9ce48cfd 100644 --- a/core/wma/src/wma_dev_if.c +++ b/core/wma/src/wma_dev_if.c @@ -2156,6 +2156,7 @@ QDF_STATUS wma_create_peer(tp_wma_handle wma, struct cdp_pdev *pdev, WMA_LOGD("%s: LFR3: Created peer %pK with peer_addr %pM vdev_id %d, peer_count - %d", __func__, peer, peer_addr, vdev_id, wma->interfaces[vdev_id].peer_count); + cdp_peer_setup(dp_soc, vdev, peer); return QDF_STATUS_SUCCESS; } param.peer_addr = peer_addr;