A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-14 00:24:41 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacmn: Fix KW issue in tdls

Browse source 
Potential NULL pointer dereferences in below functions:
tdls_delete_all_tdls_peers_flush_cb()
ucfg_tdls_notify_sta_connect()

Change-Id: Iee31d91b31c5921fbd5cc70e0b893093b496ee43
CRs-Fixed: 2350930
This commit is contained in:
Frank Liu 2018-11-16 11:41:20 +08:00 • committed by nshrivas
commit 6cbf9764e6
2 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
umac/tdls/core/src/wlan_tdls_ct.c
View file

@ -1123,10 +1123,10 @@ int tdls_set_tdls_offchannelmode(struct wlan_objmgr_vdev *vdev,
static QDF_STATUS tdls_delete_all_tdls_peers_flush_cb(struct scheduler_msg *msg)
{
if (msg && msg->bodyptr)
if (msg && msg->bodyptr) {
qdf_mem_free(msg->bodyptr);
msg->bodyptr = NULL;
msg->bodyptr = NULL;
}
return QDF_STATUS_SUCCESS;
}

3
umac/tdls/dispatcher/src/wlan_tdls_ucfg_api.c
View file

@ -825,7 +825,8 @@ QDF_STATUS ucfg_tdls_notify_sta_connect(
notify = qdf_mem_malloc(sizeof(*notify));
if (!notify) {
wlan_objmgr_vdev_release_ref(notify->vdev, WLAN_TDLS_NB_ID);
wlan_objmgr_vdev_release_ref(notify_info->vdev,
WLAN_TDLS_NB_ID);
return QDF_STATUS_E_NULL_VALUE;
}