samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

qcacmn: Fix null pointer dereference in NAN event processing

Browse Source 
In function extract_nan_event_rsp_tlv processing WMI_NAN_EVENTID,
fix a potential null pointer dereference of NAN event info data
structure.

Change-Id: I2180d3ce75d89a698d34c56d2abc7687a5fdd485
CRs-fixed: 2381237
This commit is contained in:
Manikandan Mohan
2019-01-25 16:00:57 -08:00
committed by nshrivas
parent 11cd5c7587
commit 3c572b3e19
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
wmi/src/wmi_unified_nan_tlv.c
View File

@@ -83,6 +83,10 @@ extract_nan_event_rsp_tlv(wmi_unified_t wmi_handle, void *evt_buf,
switch (nan_msg_hdr->msg_id) { switch (nan_msg_hdr->msg_id) {
case NAN_MSG_ID_ENABLE_RSP: case NAN_MSG_ID_ENABLE_RSP:
nan_evt_info = event->event_info; nan_evt_info = event->event_info;
if (!nan_evt_info) {
WMI_LOGE(FL("Fail: NAN enable rsp event info Null"));
return QDF_STATUS_E_INVAL;
}
evt_params->evt_type = nan_event_id_enable_rsp; evt_params->evt_type = nan_event_id_enable_rsp;
evt_params->mac_id = nan_evt_info->mac_id; evt_params->mac_id = nan_evt_info->mac_id;
evt_params->is_nan_enable_success = (nan_evt_info->status == 0); evt_params->is_nan_enable_success = (nan_evt_info->status == 0);