A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-25 14:13:01 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Fix pointer dereference condition

Browse source 
In the APi wlansap_roam_callback, under switch
case of roam result eCSR_ROAM_RESULT_INFRA_ASSOCIATION_IND,
the driver passes csr_roam_info in
wlansap_roam_process_infra_assoc_ind without a NULL check for
the same, which may cause pointer dereference.

Fix is to call wlansap_roam_process_infra_assoc_ind only if
csr_roam_info is valid

Change-Id: I6388b7c8f7af827a5c2a862779f04b22c5c5f23e
CRs-Fixed: 2260094
This commit is contained in:
gaurank kathpalia 2018-06-26 15:21:46 +05:30 • committed by nshrivas
commit 6f53cf10d5
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
core/sap/src/sap_api_link_cntl.c
View file

@ -1124,7 +1124,9 @@ wlansap_roam_callback(void *ctx, struct csr_roam_info *csr_roam_info,
switch (roam_result) {
case eCSR_ROAM_RESULT_INFRA_ASSOCIATION_IND:
wlansap_roam_process_infra_assoc_ind(sap_ctx, roam_result,
if (csr_roam_info)
wlansap_roam_process_infra_assoc_ind(sap_ctx,
roam_result,
csr_roam_info, &qdf_ret_status);
break;
case eCSR_ROAM_RESULT_INFRA_ASSOCIATION_CNF: