A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-12 07:37:31 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Fix NULL pointer dereferencing in p2p TX MGMT

Browse source 
Fix dereferencing channel struct pointer without verifying the
validity.

CRs-Fixed: 1034743
Change-Id: I7a49467c3fdbe85c7255fcce7f135e53658eef63
This commit is contained in:
Archana Ramachandran 2016-06-27 11:44:13 -07:00
commit dc7f2c9c2f
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
core/hdd/src/wlan_hdd_p2p.c
View file

@ -1411,7 +1411,9 @@ int __wlan_hdd_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
home_ch = goAdapter->sessionCtx.ap.operatingChannel;
}
if (ieee80211_frequency_to_channel(chan->center_freq) == home_ch) {
if (chan &&
(ieee80211_frequency_to_channel(chan->center_freq) ==
home_ch)) {
/* if adapter is already on requested ch, no need for ROC */
wait = 0;
hddLog(LOG1,
@ -1419,7 +1421,7 @@ int __wlan_hdd_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
goto send_frame;
}
if (offchan && wait) {
if (offchan && wait && chan) {
int status;
rem_on_channel_request_type_t req_type = OFF_CHANNEL_ACTION_TX;
/* In case of P2P Client mode if we are already */