diff options
| author | Naveen Rawat <nrawat@qca.qualcomm.com> | 2014-08-25 10:20:01 -0700 |
|---|---|---|
| committer | AnjaneeDevi Kapparapu <c_akappa@qti.qualcomm.com> | 2014-08-27 14:44:59 +0530 |
| commit | d1a32cf0ff4bdf706533060a42c4d5b415d4a9d7 (patch) | |
| tree | 4db66aa07c9b45528ccb27c70b8cdd6c5eae8566 | |
| parent | 8660e713340ecb8256ea11f7438534bc19166544 (diff) | |
qcacld: Fix for null pointer dereference.
For LFR3 code path in function limProcessAssocRspFrame,
packet header of reassoc response from firmware is being used
without null pointer check. Adding null pointer check.
Change-Id: Ibb9d466bbf88469b1d17f2ba9e492d8d7be96221
CRs-Fixed: 713227
| -rw-r--r-- | CORE/MAC/src/pe/lim/limProcessAssocRspFrame.c | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/CORE/MAC/src/pe/lim/limProcessAssocRspFrame.c b/CORE/MAC/src/pe/lim/limProcessAssocRspFrame.c index 8dcd0e641e00..24048b71611c 100644 --- a/CORE/MAC/src/pe/lim/limProcessAssocRspFrame.c +++ b/CORE/MAC/src/pe/lim/limProcessAssocRspFrame.c @@ -337,6 +337,16 @@ limProcessAssocRspFrame(tpAniSirGlobal pMac, tANI_U8 *pRxPacketInfo, tANI_U8 sub mlmAssocCnf.resultCode = eSIR_SME_SUCCESS; /* Update PE session Id*/ mlmAssocCnf.sessionId = psessionEntry->peSessionId; + if (pHdr == NULL) { + limLog(pMac, LOGE, + FL("LFR3: Reassoc response packet header is NULL")); + return; + } else if ( pHdr->sa == NULL) { + limLog(pMac, LOGE, + FL("LFR3: Reassoc response packet source address is NULL")); + return; + } + limLog(pMac, LOG1, FL("received Re/Assoc(%d) resp on sessionid: %d with systemrole: %d " "and mlmstate: %d RSSI %d from "MAC_ADDRESS_STR),subType, |