A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-10 06:09:23 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Fix buffer overflow issue in cds_update_with_safe_channel_list

Browse source 
Fix the size of pcl_channels & pcl_weight array to be QDF_MAX_NUM_CHAN in
cds_get_nondfs_preferred_channel. Also make sure all the callers of
cds_get_channel_list uses QDF_MAX_NUM_CHAN as channel array size.

Change-Id: I256421f54180d1d8f9f6abd549d417e74d62add5
CRs-Fixed: 1082596
This commit is contained in:
Tushnim Bhattacharyya 2016-10-26 15:14:35 -07:00 • committed by Prakash Dhavali
commit 0105770430
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
core/cds/src/cds_concurrency.c
View file

@ -8353,8 +8353,8 @@ uint8_t
cds_get_nondfs_preferred_channel(enum cds_con_mode mode,
bool for_existing_conn)
{
uint8_t pcl_channels[NUM_CHANNELS];
uint8_t pcl_weight[NUM_CHANNELS];
uint8_t pcl_channels[QDF_MAX_NUM_CHAN];
uint8_t pcl_weight[QDF_MAX_NUM_CHAN];
/*
* in worst case if we can't find any channel at all

2
core/sap/inc/sap_api.h
View file

@ -485,7 +485,7 @@ struct sap_acs_cfg {
#endif
uint16_t ch_width;
uint8_t pcl_channels[NUM_CHANNELS];
uint8_t pcl_channels[QDF_MAX_NUM_CHAN];
uint32_t pcl_ch_count;
/* ACS Algo Output */
uint8_t pri_ch;