wlan : Array Index Out of Bounds in csrNeighborRoam file.

In csrNeighborRoamMergeChannelLists function, input
channel list is merged with the output channel list
without checking if new output list exceeds valid
channel list length. Added a condition check so that
output list is always array bound.

Change-Id: I7d38f105b023f1bac467c70c3dd8ca76ab12f5b6
CRs-Fixed: 658577
wlan: Array Index Out of Bounds in limProcessTdls.c

In function limTdlsPopulateMatchingRateSet, array
pSupportedRateSet bound might be exceeded since
its index was accessed without checking its upper
bound. Added a condition check so that array is
always within bound.

Change-Id: If60c4f94dccb893c45bf735fbe48ca543956da9b
CRs-Fixed: 658735
wlan: NULL pointer dereference in wlan_hdd_p2p.c

Currently cfgState->remain_on_chan_ctx is assigned
to pRemainChanCtx without NULL check of cfgState.
Added a NULL check prior to assignment.

Change-Id: I8c9862caae9155019284fd2a3f6241d4beb8b3cc
CRs-Fixed: 658825
wlan: Null pointer dereferencing in HDD wext.c

In this issue pointers 'pAdapter'and 'pMac'
are checked for null , but there is no
associated 'return' statement.As a part of
fix ,return if 'pAdapter'and 'pMac' are null.

Change-Id: I6d1a8542e09d6facbd50de2fb2d059475e8c1da4
CRs-Fixed: 658970
wlan: Fix peer leak in UMAC

It was seen in the code that when DUT is operating in SAP mode,
there is a possibility of peer leak in UMAC, where UMAC does not
do a proper clean-up. This happens when a STA which is trying to
associate to the SAP sends a disassoc when the SAP is waiting for
ASSOC confirmation. UMAC is not doing a DelSTA when processing the
disassoc from the STA. Hence now added a change which will ensure
proper clean-up is done upon receiving a disassoc from the STA.

Change-Id: I08d4bebe57463b88a1a8802d28ebe8e2d38ae460
CRs-Fixed: 659131
Wlan: Revision 3.2.3.317

Revision 3.2.3.317

Change-Id: I45f5f5ebb0e3a98ae60fb67db8be47b6e3fe96c5