qcacld-3.0: Fix OOB issue when access wma_find_vdev_by_addr

The function 'wma_find_vdev_by_addr' returns pointer to cdp_vdev, so
should avoid to comapre with QDF_STATUS_SUCCESS.

Change-Id: Ia302fcc8e705cc01a27bd1dce9f7cb09a8ef29b0
CRs-Fixed: 3346764

Mot-CRs-fixed: (CR)
CVE- fixed: CVE-2023-21669
QC-CR#3346764
Signed-off-by: Sipra Patel <siprap@motorola.com>
Change-Id: Ia302fcc8e705cc01a27bd1dce9f7cb09a8ef29b0
Reviewed-on: https://gerrit.mot.com/2594389
SME-Granted: SME Approvals Granted
SLTApproved: Slta Waiver
Tested-by: Jira Key
Reviewed-by: Zhengjie Zhu <zhuzj5@motorola.com>
Reviewed-by: Bin Liu <liubin7@motorola.com>
Submit-Approved: Jira Key
This commit is contained in:
Wu Gao authored and Marcelo Bissaro committed 2023-11-29 02:24:01 -06:00
1 parent 3bcae3a9c0
commit 715a9dc0d2
1 file changed
+2 -1
+2 -1
View File
@@ -1,5 +1,6 @@
/*
* Copyright (c) 2013-2020 The Linux Foundation. All rights reserved.
* Copyright (c) 2022 Qualcomm Innovation Center, Inc. All rights reserved.
*
* Permission to use, copy, modify, and/or distribute this software for
* any purpose with or without fee is hereby granted, provided that the
@@ -3478,7 +3479,7 @@ int wma_form_rx_packet(qdf_nbuf_t buf,
if (status)
return status;
} else if (wma_find_vdev_id_by_addr(wma_handle, wh->i_addr1,
&vdev_id) == QDF_STATUS_SUCCESS) {
&vdev_id)) {
status = wma_check_and_process_rmf_frame(wma_handle,
vdev_id,
&wh,