diff options
| author | Yeshwanth Sriram Guntuka <ysriramg@codeaurora.org> | 2019-05-08 15:16:07 +0530 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2020-12-22 23:58:13 -0800 |
| commit | 6d0a7569581368017c118fc3b7cebfee2dc37bd0 (patch) | |
| tree | 7c73c0adbaa2652a3af093ac6862e58549197dca /scripts/docproc.c | |
| parent | 3963fd07c29d618d35ddd2decd2db009256be110 (diff) | |
qcacmn: Fix potential double free in send_log_supported_evt_cmd_tlv
In send_log_supported_evt_cmd_tlv, events_logs_list in
wma handle is freed if previously allocated. If the
num_of_diag_events_logs exceeds the max size, we exit
from the function early without allocating memory for
events_logs_list. This can result in potential double
free scenario if we receive another DIAG_EVENT_LOG_SUPPORTED
event from firmware.
Fix is to set events_logs_list pointer to NULL after
freeing memory.
Change-Id: I9d6148dfc064d87e2947d1b5ec4492c08913dd4c
CRs-Fixed: 2433802
Diffstat (limited to 'scripts/docproc.c')
0 files changed, 0 insertions, 0 deletions