A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-14 16:46:15 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacmn: Fix null pointer dereference, wlan_cp_stats_psoc_obj_create_handler

Browse source 
In wlan_cp_stats_psoc_obj_create_handler() multiple error paths
lead to label wlan_cp_stats_psoc_obj_create_handler_return.

In the label, posc_cs is not null checked before passing to the
csc->cp_stats_psoc_obj_deinit() causing NULL pointer dereference.

Change-Id: I82a48cee7d2734a96960aeedff42fc4cdf94bf9c
CRs-Fixed: 2336830
This commit is contained in:
Harprit Chhabada 2018-10-23 16:31:51 -07:00 • committed by nshrivas
commit 38d7f92a30
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
umac/cp_stats/core/src/wlan_cp_stats_obj_mgr_handler.c
View file

@ -96,7 +96,7 @@ wlan_cp_stats_psoc_obj_create_handler(struct wlan_objmgr_psoc *psoc, void *arg)
wlan_cp_stats_psoc_obj_create_handler_return:
if (QDF_IS_STATUS_ERROR(status)) {
if (csc) {
if (csc->cp_stats_psoc_obj_deinit)
if (csc->cp_stats_psoc_obj_deinit && psoc_cs)
csc->cp_stats_psoc_obj_deinit(psoc_cs);
if (csc->psoc_cs) {