From 68726b6c73ac4773c8771c14b5b613dbd478fd78 Mon Sep 17 00:00:00 2001 From: Sandeep Puligilla Date: Thu, 25 May 2017 11:19:16 -0700 Subject: [PATCH] qcacld-3.0: Fix memory corruption in CSR Freed scan list is accessed in CSR. Don't free the memory when the scan list contains zero entries. Change-Id: Ia3bd1193288781ea15a2eab2e0a0ffd24b4d03f7 CRs-Fixed: 2052399 --- core/sme/src/csr/csr_api_scan.c | 1 - 1 file changed, 1 deletion(-) diff --git a/core/sme/src/csr/csr_api_scan.c b/core/sme/src/csr/csr_api_scan.c index 882cdee32a33..8179a9e6d8cb 100644 --- a/core/sme/src/csr/csr_api_scan.c +++ b/core/sme/src/csr/csr_api_scan.c @@ -5352,7 +5352,6 @@ tpSirBssDescription csr_get_fst_bssdescr_ptr(tScanResultHandle result_handle) if (csr_ll_is_list_empty(&bss_list->List, LL_ACCESS_NOLOCK)) { QDF_TRACE(QDF_MODULE_ID_SME, QDF_TRACE_LEVEL_ERROR, FL("bss_list->List is empty")); - qdf_mem_free(bss_list); return NULL; } first_element = csr_ll_peek_head(&bss_list->List, LL_ACCESS_NOLOCK);