A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-24 13:44:26 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Add check for vdev_id in wma_p2p_lo_event_handler

Browse source 
Currently fix_param->vdev_id, recevied from the FW, is directly used
to refer to wma->interfaces without validating if the vdev_id is valid.

Add sanity check to make sure vdev_id is less than max_bssid before
using it.

Change-Id: I92743589e0333449c39e148b37d200cac2cdb817
CRs-Fixed: 2119434
This commit is contained in:
Vignesh Viswanathan 2017-10-04 19:03:48 +05:30 • committed by Nandini Suresh
commit 18827b06d7
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
core/wma/src/wma_features.c
View file

@ -4850,6 +4850,11 @@ int wma_p2p_lo_event_handler(void *handle, uint8_t *event_buf,
param_tlvs = (WMI_P2P_LISTEN_OFFLOAD_STOPPED_EVENTID_param_tlvs *)
event_buf;
fix_param = param_tlvs->fixed_param;
if (fix_param->vdev_id >= wma->max_bssid) {
WMA_LOGE("%s: received invalid vdev_id %d",
__func__, fix_param->vdev_id);
return -EINVAL;
}
event = qdf_mem_malloc(sizeof(*event));
if (event == NULL) {
WMA_LOGE("Event allocation failed");