A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-14 08:36:12 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Check txrx vdev pointer before tx mgmt frame

Browse source 
It get NULL pointer to txrx vdev when Rome platform tx mgmt frame in
cdp_mgmt_send_ext, and then DUT broken since access NULL pointer.
So, add protection before call cdp_mgmt_send_ext.

Change-Id: Ia51a8183bf89115a4f0f3520b80186daa379602d
CRs-Fixed: 2265687
This commit is contained in:
Wu Gao 2018-07-05 11:34:36 +08:00 • committed by nshrivas
commit b422f77258
1 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

14
core/wma/src/wma_mgmt.c
View file

@ -4297,7 +4297,8 @@ QDF_STATUS wma_mgmt_unified_cmd_send(struct wlan_objmgr_vdev *vdev,
void *mgmt_tx_params)
{
tp_wma_handle wma_handle;
QDF_STATUS status;
int ret;
QDF_STATUS status = QDF_STATUS_E_INVAL;
struct wmi_mgmt_params *mgmt_params =
(struct wmi_mgmt_params *)mgmt_tx_params;
void *soc = cds_get_context(QDF_MODULE_ID_SOC);
@ -4326,14 +4327,15 @@ QDF_STATUS wma_mgmt_unified_cmd_send(struct wlan_objmgr_vdev *vdev,
wmi_service_mgmt_tx_wmi)) {
status = wmi_mgmt_unified_cmd_send(wma_handle->wmi_handle,
mgmt_params);
} else {
} else if (txrx_vdev) {
QDF_NBUF_CB_MGMT_TXRX_DESC_ID(buf)
= mgmt_params->desc_id;
status = cdp_mgmt_send_ext(soc, txrx_vdev, buf,
mgmt_params->tx_type,
mgmt_params->use_6mbps,
mgmt_params->chanfreq);
ret = cdp_mgmt_send_ext(soc, txrx_vdev, buf,
mgmt_params->tx_type,
mgmt_params->use_6mbps,
mgmt_params->chanfreq);
status = qdf_status_from_os_return(ret);
}
if (status != QDF_STATUS_SUCCESS) {