A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-25 14:13:01 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacmn: Fix memory access out of bounds when sort 6g channel list

Browse source 
In arch 32 platform, the size of rnr_chan_info is 8 bytes, and it only
allocates 4 bytes for each of them. Which cause memory access out of
bounds.

Change-Id: I4f1798c5354c6a76e32bdfed13ade9667465b789
CRs-Fixed: 2827289
This commit is contained in:
Wu Gao 2020-11-26 20:17:09 +08:00 • committed by Gerrit - the friendly Code Review server
commit 137abd72ab
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
umac/scan/core/src/wlan_scan_manager_6ghz.c
View file

@ -75,7 +75,7 @@ scm_sort_6ghz_channel_list(struct wlan_objmgr_vdev *vdev,
if (tmp_list_count <= 1)
return;
rnr_chan_info = qdf_mem_malloc(sizeof(rnr_chan_info) * tmp_list_count);
rnr_chan_info = qdf_mem_malloc(sizeof(*rnr_chan_info) * tmp_list_count);
if (!rnr_chan_info)
return;