From a98a87b7e44f5bcac7b0179405b89a572ea4b54a Mon Sep 17 00:00:00 2001 From: Arif Hussain Date: Thu, 27 Jul 2017 15:14:45 -0700 Subject: [PATCH] qcacld-3.0: Fix NULL pointer access in sme_qos_process_add_ts_success_rsp Make sure to validate pCurRoamProfile before dereferencing it to avoid NULL pointer access. Change-Id: Ic2f68b9cfe352d903bebba163ccfe253e04dfcdb CRs-Fixed: 2083710 --- core/sme/src/qos/sme_qos.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/core/sme/src/qos/sme_qos.c b/core/sme/src/qos/sme_qos.c index 9516204b59d4..b803092e9027 100644 --- a/core/sme/src/qos/sme_qos.c +++ b/core/sme/src/qos/sme_qos.c @@ -5655,12 +5655,11 @@ QDF_STATUS sme_qos_process_add_ts_success_rsp(tpAniSirGlobal pMac, /* Inform this TSPEC IE change to FW */ csr_session = CSR_GET_SESSION(pMac, sessionId); - if (csr_session != NULL && - csr_session->pCurRoamProfile->csrPersona == QDF_STA_MODE) { + if ((csr_session != NULL) && (NULL != csr_session->pCurRoamProfile) && + (csr_session->pCurRoamProfile->csrPersona == QDF_STA_MODE)) csr_roam_offload_scan(pMac, sessionId, ROAM_SCAN_OFFLOAD_UPDATE_CFG, REASON_CONNECT_IES_CHANGED); - } (void)sme_qos_process_buffered_cmd(sessionId); return QDF_STATUS_SUCCESS;