commit da0fe36053db6ee35e40b6a8d975e373c4ddfa89
author Hanumantha Reddy Pothula <c_hpothu@qti.qualcomm.com> Fri Feb 27 18:37:03 2015 +0530
committer Satyanarayana Dash <c_sadash@qti.qualcomm.com> Wed Mar 18 18:57:50 2015 +0530
tree 48d8abe310bedd23a0ba72aceea47eceba108455
parent 036495ac09c96ebc04cd304218471827c2d8e3b8

wlan: Validate adapter's magic number in timer handlers

Before accessing adapter context, validate adapter's magic number
along with NULL check to confirm that instance of adapter context
is valid.

Change-Id: If0365c765ad87be53b7e78d8744f0dcfe1a310ab
CRs-Fixed: 803527.

CORE/HDD/src/wlan_hdd_wmm.c

diff --git a/CORE/HDD/src/wlan_hdd_wmm.c b/CORE/HDD/src/wlan_hdd_wmm.c
index 5c19f92..a675e01 100644
--- a/CORE/HDD/src/wlan_hdd_wmm.c
+++ b/CORE/HDD/src/wlan_hdd_wmm.c
@@ -567,6 +567,13 @@
 
     acType = pQosContext->acType;
     pAdapter = pQosContext->pAdapter;
+    if ((NULL == pAdapter) || (WLAN_HDD_ADAPTER_MAGIC != pAdapter->magic))
+    {
+        VOS_TRACE(VOS_MODULE_ID_HDD, VOS_TRACE_LEVEL_ERROR,
+                  FL("invalid pAdapter: %p"), pAdapter);
+        return;
+    }
+
     pAc = &pAdapter->hddWmmStatus.wmmAcStatus[acType];
 
     // Get the Tx stats for this AC.