qcacld-3.0: Avoid null pointer access of vdev

In function hdd_softap_set_channel_change, vdev is passed to
function wlan_vdev_mlme_get_opmode without taking reference.
This can lead to NULL pointer access.

Change-Id: Ibbc58a1e7a4be0e0e34982b99541a63cd77e0480
CRs-Fixed: 2518560
这个提交包含在:
Bala Venkatesh
2019-09-05 11:48:13 +05:30
提交者 nshrivas
父节点 c9d6029874
当前提交 ae665afe32

查看文件

@@ -2881,6 +2881,7 @@ int hdd_softap_set_channel_change(struct net_device *dev, int target_channel,
uint8_t conc_rule1 = 0;
uint8_t scc_on_lte_coex = 0;
bool is_p2p_go_session = false;
struct wlan_objmgr_vdev *vdev;
hdd_ctx = WLAN_HDD_GET_CTX(adapter);
ret = wlan_hdd_validate_context(hdd_ctx);
@@ -2992,8 +2993,15 @@ int hdd_softap_set_channel_change(struct net_device *dev, int target_channel,
* Post the Channel Change request to SAP.
*/
if (wlan_vdev_mlme_get_opmode(adapter->vdev) == QDF_P2P_GO_MODE)
vdev = hdd_objmgr_get_vdev(adapter);
if (!vdev) {
qdf_atomic_set(&adapter->ch_switch_in_progress, 0);
wlan_hdd_enable_roaming(adapter);
return -EINVAL;
}
if (wlan_vdev_mlme_get_opmode(vdev) == QDF_P2P_GO_MODE)
is_p2p_go_session = true;
hdd_objmgr_put_vdev(vdev);
status = wlansap_set_channel_change_with_csa(
WLAN_HDD_GET_SAP_CTX_PTR(adapter),