A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-11 23:24:22 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Fix Null pointer dereference in rrm_process_beacon_report_xmit

Browse source 
In function rrm_process_beacon_report_xmit, reset flag_bss_present before
processing each bss descriptor.

Change-Id: Ic3ef01d79135effe718cbeec29894f6000de7f07
CRs-Fixed: 1034255
This commit is contained in:
Naveen Rawat 2016-06-27 15:25:56 -07:00 • committed by Nandini Suresh
commit d4b56dadeb
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
core/mac/src/pe/rrm/rrm_api.c
View file

@ -800,7 +800,7 @@ rrm_process_beacon_report_xmit(tpAniSirGlobal mac_ctx,
tpRRMReq curr_req = mac_ctx->rrm.rrmPEContext.pCurrentReq;
tpPESession session_entry;
uint8_t session_id;
bool flag_bss_present = false, bss_desc_count = 0;
bool flag_bss_present, bss_desc_count = 0;
lim_log(mac_ctx, LOG1, FL("Received beacon report xmit indication"));
@ -845,6 +845,7 @@ rrm_process_beacon_report_xmit(tpAniSirGlobal mac_ctx,
report[bss_desc_count].report.beaconReport;
bss_desc = beacon_xmit_ind->
pBssDescription[bss_desc_count];
flag_bss_present = false;
/* Prepare the beacon report and send it to the peer.*/
report[bss_desc_count].token =
beacon_xmit_ind->uDialogToken;