A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-11 23:24:22 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Fix NULL pointer dereference in __lim_process_sme_join_req

Browse source 
In function __lim_process_sme_join_req, access session id and transaction
id from msg_buff instead of sme_join_req which could be null at the point
of access.

Change-Id: I299b87f6144d0b6452d49ebc9d8ed28ff417723c
CRs-Fixed: 1034255
This commit is contained in:
Naveen Rawat 2016-06-27 15:24:29 -07:00 • committed by Nandini Suresh
commit 9ea7470dde
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
core/mac/src/pe/lim/lim_process_sme_req_messages.c
View file

@ -2066,8 +2066,8 @@ __lim_process_sme_join_req(tpAniSirGlobal mac_ctx, uint32_t *msg_buf)
}
end:
sme_session_id = sme_join_req->sessionId;
sme_transaction_id = sme_join_req->transactionId;
sme_session_id = ((tpSirSmeJoinReq)msg_buf)->sessionId;
sme_transaction_id = ((tpSirSmeJoinReq)msg_buf)->transactionId;
if (sme_join_req) {
qdf_mem_free(sme_join_req);