From 8efaac88d48e33e896bfcdf73b959de94c83397e Mon Sep 17 00:00:00 2001 From: Ashish Kumar Dhanotiya Date: Wed, 17 Oct 2018 16:45:54 +0530 Subject: [PATCH] qcacmn: Null pointer access in green ap egap status event While extracting green ap egap status info there is no sanity check for egap info event and chainmask event which may lead to NULL pointer access. To prevent this NULL pointer access add a sanity check for egap info event and chainmask event. Change-Id: Ib9cc273f12bb159bce309065279230e96925be7f CRs-Fixed: 2331873 --- wmi/src/wmi_unified_tlv.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/wmi/src/wmi_unified_tlv.c b/wmi/src/wmi_unified_tlv.c index 644851337d48..ba8fdc394cfa 100644 --- a/wmi/src/wmi_unified_tlv.c +++ b/wmi/src/wmi_unified_tlv.c @@ -10541,6 +10541,11 @@ static QDF_STATUS extract_green_ap_egap_status_info_tlv( chainmask_event = (wmi_ap_ps_egap_info_chainmask_list *) param_buf->chainmask_list; + if (!egap_info_event || !chainmask_event) { + WMI_LOGE("Invalid EGAP Info event or chainmask event"); + return QDF_STATUS_E_INVAL; + } + egap_status_info_params->status = egap_info_event->status; egap_status_info_params->mac_id = chainmask_event->mac_id; egap_status_info_params->tx_chainmask = chainmask_event->tx_chainmask;