From f4d4ad9376044f0bc8059f508d38abda189efcf0 Mon Sep 17 00:00:00 2001 From: Wu Gao Date: Tue, 6 Dec 2022 16:31:04 +0800 Subject: [PATCH] qcacld-3.0: Fix OOB issue when access wma_find_vdev_by_addr The function 'wma_find_vdev_by_addr' returns pointer to cdp_vdev, so should avoid to comapre with QDF_STATUS_SUCCESS. Change-Id: I45716651c89a53341d09737d83556bc515858361 CRs-Fixed: 3346764 Mot-CRs-fixed: (CR) CVE- fixed: CVE-2023-21669 QC-CR#3346764 Signed-off-by: Sipra Patel Change-Id: I45716651c89a53341d09737d83556bc515858361 Reviewed-on: https://gerrit.mot.com/2594404 SLTApproved: Slta Waiver SME-Granted: SME Approvals Granted Tested-by: Jira Key Reviewed-by: Zhengjie Zhu Reviewed-by: Bin Liu Submit-Approved: Jira Key --- core/wma/src/wma_mgmt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/wma/src/wma_mgmt.c b/core/wma/src/wma_mgmt.c index e6136508c682..9fcafc205c6d 100644 --- a/core/wma/src/wma_mgmt.c +++ b/core/wma/src/wma_mgmt.c @@ -3456,7 +3456,7 @@ int wma_form_rx_packet(qdf_nbuf_t buf, if (status) return status; } else if (wma_find_vdev_id_by_addr(wma_handle, wh->i_addr1, - &vdev_id) == QDF_STATUS_SUCCESS) { + &vdev_id)) { status = wma_check_and_process_rmf_frame(wma_handle, vdev_id, &wh,