Bläddra i källkod

qcacld-3.0: Fix possible NULL pointer dereference

In function sme_get_beacon_frm, csr_get_fst_bssdescr_ptr can return a NULL
pointer. Check it against NULL before usage.

Change-Id: I76112adf9a0a618bf7e956911d68e7ee2edac61e
CRs-Fixed: 2008664
Naveen Rawat 8 år sedan
förälder
incheckning
ae0aaa8379
1 ändrade filer med 6 tillägg och 1 borttagningar
  1. 6 1
      core/sme/src/common/sme_api.c

+ 6 - 1
core/sme/src/common/sme_api.c

@@ -15995,6 +15995,11 @@ QDF_STATUS sme_get_beacon_frm(tHalHandle hal, tCsrRoamProfile *profile,
 
 	bss_list = (tScanResultList *)result_handle;
 	bss_descp = csr_get_fst_bssdescr_ptr(bss_list);
+	if (!bss_descp) {
+		sms_log(mac_ctx, LOGE, FL("unable to fetch bss descriptor"));
+		status = QDF_STATUS_E_FAULT;
+		goto free_scan_flter;
+	}
 
 	/*
 	 * bss_descp->length = sizeof(tSirBssDescription) - sizeof(length_field)
@@ -16022,7 +16027,7 @@ free_scan_flter:
 		qdf_mem_free(scan_filter);
 	}
 
-	return QDF_STATUS_SUCCESS;
+	return status;
 }
 
 /**