diff options
| author | Abhinav Kumar <abhikuma@codeaurora.org> | 2017-12-19 17:04:22 +0530 |
|---|---|---|
| committer | Eric Olsen <eolsen@google.com> | 2018-07-11 12:41:06 -0700 |
| commit | 4f83106d0e914c27620f5f9c86f69fe8805c9e78 (patch) | |
| tree | b080bf0bc6c8402621927c3abf6bb1b6f68ccf8f | |
| parent | 624be3e51e6dadac28a6b9fb407a97a4f45467cc (diff) | |
| download | qcom-msm8x09-v3.10-4f83106d0e914c27620f5f9c86f69fe8805c9e78.tar.gz | |
qcacld-2.0: Add vdev sanity check in action frame handler
Add vdev sanity check before accessing the wma
interface structure as part of the action
frame evt handling.
Bug: 72679324
Change-Id: I19998b56f5932df92e2ab8b73bc17d9c60f33ed6
CRs-Fixed: 2161148
| -rw-r--r-- | drivers/staging/qcacld-2.0/CORE/SERVICES/WMA/wma.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/drivers/staging/qcacld-2.0/CORE/SERVICES/WMA/wma.c b/drivers/staging/qcacld-2.0/CORE/SERVICES/WMA/wma.c index 8f566af0127..db7c8fe3c86 100644 --- a/drivers/staging/qcacld-2.0/CORE/SERVICES/WMA/wma.c +++ b/drivers/staging/qcacld-2.0/CORE/SERVICES/WMA/wma.c @@ -9295,7 +9295,10 @@ wma_action_frame_filter_mac_event_handler(void *handle, u_int8_t *event_buf, WMA_LOGA(FL("Invalid fixed param")); return -EINVAL; } - + if (event->vdev_id >= wma_handle->max_bssid) { + WMA_LOGA(FL("Invalid vdev id")); + return -EINVAL; + } intr = &wma_handle->interfaces[event->vdev_id]; /* command is in progess */ if(!intr->action_frame_filter) { |