diff options
| author | Alok Kumar <alokkuma@codeaurora.org> | 2018-06-15 20:27:12 +0530 |
|---|---|---|
| committer | nshrivas <nshrivas@codeaurora.org> | 2018-06-15 12:05:55 -0700 |
| commit | 28e4fb5c918ae929d45f3752851592853b7d4637 (patch) | |
| tree | d94d4cf7a8ed5baf94563b97b7ea56f77b8592e3 | |
| parent | b8b816889f8a7b800beff68305b91f67343e65f9 (diff) | |
qcacld-3.0: Fix invalid dereferencing of peer_id_to_obj_map for peer_ref
Currently, in ol_txrx_is_peer_eligible_for_deletion(), invalid
dereferencing of peer_id_to_obj_map[0xFFFF] to get peer_ref.
Add sanity check for peer_id before using it as an index
Change-Id: Ibcb3cc03de93a5722bfd42f9638ab597778c12e1
CRs-Fixed: 2259828
| -rw-r--r-- | core/dp/txrx/ol_txrx.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/core/dp/txrx/ol_txrx.c b/core/dp/txrx/ol_txrx.c index 049f548598c8..3e9ebd2ca56e 100644 --- a/core/dp/txrx/ol_txrx.c +++ b/core/dp/txrx/ol_txrx.c @@ -3513,6 +3513,9 @@ bool ol_txrx_is_peer_eligible_for_deletion(ol_txrx_peer_handle peer, for (i = 0; i < MAX_NUM_PEER_ID_PER_PEER; i++) { peer_id = peer->peer_ids[i]; + if (peer_id == HTT_INVALID_PEER) + continue; + if (!pdev->peer_id_to_obj_map[peer_id].peer_ref) continue; |