diff options
| author | Linux Build Service Account <lnxbuild@localhost> | 2017-04-17 01:32:31 -0700 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2017-04-17 01:32:31 -0700 |
| commit | 83eae70ee00161f6880136882f9627cbd0fc31df (patch) | |
| tree | ff90382fb0e6734d0f29a46d8229911bd1ca8ac5 | |
| parent | 59fdfcc23b4bc3079ecdaf48b3969ca522314dbb (diff) | |
| parent | afd543891bbf33c52cdbbc9079aa1b3043706778 (diff) | |
Merge "qcacld-2.0: Fix out of bounds bug in limProcessMessages" into wlan-cld2.driver.lnx.1.0-dev
| -rw-r--r-- | CORE/MAC/src/pe/lim/limProcessMessageQueue.c | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/CORE/MAC/src/pe/lim/limProcessMessageQueue.c b/CORE/MAC/src/pe/lim/limProcessMessageQueue.c index 641c525708cc..fabc36820500 100644 --- a/CORE/MAC/src/pe/lim/limProcessMessageQueue.c +++ b/CORE/MAC/src/pe/lim/limProcessMessageQueue.c @@ -1389,12 +1389,10 @@ limProcessMessages(tpAniSirGlobal pMac, tpSirMsgQ limMsg) break; case eWNI_SME_SCAN_ABORT_IND: { - tSirMbMsg *pMsg = limMsg->bodyptr; - tANI_U8 sessionId; + tSirSmeScanAbortReq *pMsg = (tSirSmeScanAbortReq *)limMsg->bodyptr; if (pMsg) { - sessionId = (tANI_U8) pMsg->data[0]; - limProcessAbortScanInd(pMac, sessionId); + limProcessAbortScanInd(pMac, pMsg->sessionId); vos_mem_free((v_VOID_t *)limMsg->bodyptr); limMsg->bodyptr = NULL; } |