commit f2bb62eeb7d0e32056c413c473f348fac9de0d60
author Pragaspathi Thilagaraj <tpragasp@codeaurora.org> Tue Oct 09 12:01:26 2018 +0530
committer nshrivas <nshrivas@codeaurora.org> Wed Oct 10 09:17:55 2018 -0700
tree 8d4957f7a8bb1da82ce53fd81a6a0851c32581b4
parent 9415f6f490c0f29bd375218a085f573467010e52

qcacld-3.0: Fix NULL pointer dereference in csr_roam_chk_lnk_swt_ch_ind

In the functioncsr_roam_chk_lnk_swt_ch_ind(), newChannelId is
updated to session->pConnectBssDesc->channelId and
pConnectBssDesc->ieFields is passed to wlan_cfg_get_ie_ptr().
the parameters of pConnectBssDesc are accessed without
validating pConnectBssDesc. This can result in possible null
pointer dereference.

Validate the session->pConnectBssDesc before access.

Change-Id: I45f2c090cea90052f91d678f1bacd1411c4b9496
CRs-Fixed: 2329317