From e96d1033b4bcee87b071dfa4401cd5d973854d3f Mon Sep 17 00:00:00 2001
From: Baowei Liu <baowei@codeaurora.org>
Date: Fri, 29 Mar 2019 09:39:32 +0800
Subject: [PATCH] qcacld-3.0: fix memory overwritten in
 csr_roam_chk_lnk_swt_ch_ind

memory of sizeof(!roam_info) is not correct

Change-Id: Ida0c617815439de33b767b9eb8ed16869264854b
---
 core/sme/src/csr/csr_api_roam.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/sme/src/csr/csr_api_roam.c b/core/sme/src/csr/csr_api_roam.c
index 135699ac1f42..13defcf374ac 100644
--- a/core/sme/src/csr/csr_api_roam.c
+++ b/core/sme/src/csr/csr_api_roam.c
@@ -11565,7 +11565,7 @@ csr_roam_chk_lnk_swt_ch_ind(struct mac_context *mac_ctx, tSirSmeRsp *msg_ptr)
 		}
 	}
 
-	roam_info = qdf_mem_malloc(sizeof(!roam_info));
+	roam_info = qdf_mem_malloc(sizeof(*roam_info));
 	if (!roam_info)
 		return;
 	roam_info->chan_info.chan_id = pSwitchChnInd->newChannelId;