commit 6029da21068b458456c7d3689cca8b6f5d498c26
author Service qcabuildsw <qcabuildsw@localhost> Mon Oct 17 20:45:39 2016 -0700
committer Gerrit - the friendly Code Review server <code-review@localhost> Mon Oct 17 20:45:39 2016 -0700
tree 18329b47e0c8ab51e3b80627494e816cdcb5d072
parent 16602d36f1b48d192b53dc16ed08f49c196420f0
parent 59ff755f86a98ad686890dd778266394c2aa306f

Merge "qcacld-3.0: Validate session Id in sme_QosInternalReleaseReq" into wlan-cld3.driver.lnx.1.1-dev

core/sme/src/qos/sme_qos.c

diff --git a/core/sme/src/qos/sme_qos.c b/core/sme/src/qos/sme_qos.c
index 5eaa248..3ad7a41 100644
--- a/core/sme/src/qos/sme_qos.c
+++ b/core/sme/src/qos/sme_qos.c
@@ -2072,6 +2072,14 @@
 	flow_info = GET_BASE_ADDR(pEntry, sme_QosFlowInfoEntry, link);
 	ac = flow_info->ac_type;
 	sessionId = flow_info->sessionId;
+
+	if (!CSR_IS_SESSION_VALID(pMac, sessionId)) {
+		QDF_TRACE(QDF_MODULE_ID_SME, QDF_TRACE_LEVEL_ERROR,
+			"%s: %d: Session Id: %d is invalid",
+			__func__, __LINE__, sessionId);
+		return status;
+	}
+
 	pSession = &sme_qos_cb.sessionInfo[sessionId];
 	pACInfo = &pSession->ac_info[ac];
 	/* need to vote off powersave for the duration of this request */