In the APi wlansap_roam_callback, under switch case of roam result eCSR_ROAM_RESULT_INFRA_ASSOCIATION_IND, the driver passes csr_roam_info in wlansap_roam_process_infra_assoc_ind without a NULL check for the same, which may cause pointer dereference. Fix is to call wlansap_roam_process_infra_assoc_ind only if csr_roam_info is valid Change-Id: I6388b7c8f7af827a5c2a862779f04b22c5c5f23e CRs-Fixed: 2260094 |
||
---|---|---|
.. | ||
inc | ||
src |