qcacmn: Fix NULL pointer dereference

In extract_hal_reg_cap_tlv(), hal_reg_capabilities
can be optionally defined. This field can be NULL
resulting in a NULL pointer read. Add NULL pointer
check before qdf_memory_call().

Change-Id: I142bed65e80aa9b4bb88a4e68f74235dd50e3624
CRs-Fixed: 2368284
Cette révision appartient à :
tinlin
2018-12-20 17:02:17 +08:00
révisé par nshrivas
Parent f9074e2c09
révision ab5cba5cbb

Voir le fichier

@@ -8119,7 +8119,10 @@ static QDF_STATUS extract_hal_reg_cap_tlv(wmi_unified_t wmi_handle,
WMI_SERVICE_READY_EVENTID_param_tlvs *param_buf;
param_buf = (WMI_SERVICE_READY_EVENTID_param_tlvs *) evt_buf;
if (!param_buf) {
WMI_LOGE("%s: Invalid arguments", __func__);
return QDF_STATUS_E_FAILURE;
}
qdf_mem_copy(cap, (((uint8_t *)param_buf->hal_reg_capabilities) +
sizeof(uint32_t)),
sizeof(struct wlan_psoc_hal_reg_capability));