commit c47c0f2e04471eaeb671307ec55f0af5c00d72c4
author Jeff Johnson <jjohnson@qca.qualcomm.com> Wed Apr 03 14:21:39 2013 -0700
committer Gopichand Nakkala <gnakkala@qca.qualcomm.com> Fri Apr 05 13:22:58 2013 -0700
tree 6fdf37b25a3600937cd2feab235433416ddb1ff0
parent 2e77e8c34d7bb6561a209d5684a82492b293a99c

wlan: Fix memory leak in limSendMlmAssocInd()

Static source code analysis identified an error path in
limSendMlmAssocInd() which will leak an allocated buffer.  Fix
limSendMlmAssocInd() so that it frees the buffer before returning.

Change-Id: Ic3f75099bc82799770a6d8caac28abde678c373f
CRs-fixed: 470188

CORE/MAC/src/pe/lim/limProcessAssocReqFrame.c

diff --git a/CORE/MAC/src/pe/lim/limProcessAssocReqFrame.c b/CORE/MAC/src/pe/lim/limProcessAssocReqFrame.c
index eae7010..2f0e0c5 100644
--- a/CORE/MAC/src/pe/lim/limProcessAssocReqFrame.c
+++ b/CORE/MAC/src/pe/lim/limProcessAssocReqFrame.c
@@ -1403,6 +1403,7 @@
             if((pMlmAssocInd->rsnIE.length + pAssocReq->wpa.length) >= SIR_MAC_MAX_IE_LENGTH)
             {
                 PELOGE(limLog(pMac, LOGE, FL("rsnIEdata index out of bounds %d"), pMlmAssocInd->rsnIE.length);)
+                palFreeMemory(pMac->hHdd, pMlmAssocInd);
                 return;
             }
             pMlmAssocInd->rsnIE.rsnIEdata[pMlmAssocInd->rsnIE.length] = SIR_MAC_WPA_EID;