A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-26 06:33:19 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Specify exact size of the version string while coping

Browse source 
While coping version strings in cds_hang_event_notifier_call, specify
exact size of QWLAN_VERSIONSTR/QDF_HANG_EVENT_VERSION to avoid buffer
overflow.

Change-Id: Ie2203600a2c92bb78ba076b609375ca219773b19
CRs-Fixed: 2702069
This commit is contained in:
Bapiraju Alla 2020-06-04 13:45:04 +05:30 • committed by nshrivas
commit 2f20b939d1
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
core/cds/src/cds_api.c
View file

@ -555,9 +555,11 @@ static int cds_hang_event_notifier_call(struct notifier_block *block,
cmd->recovery_reason = gp_cds_context->recovery_reason;
qdf_mem_copy(&cmd->driver_version, QWLAN_VERSIONSTR, 11);
qdf_mem_copy(&cmd->driver_version, QWLAN_VERSIONSTR,
sizeof(QWLAN_VERSIONSTR));
qdf_mem_copy(&cmd->hang_event_version, QDF_HANG_EVENT_VERSION, 3);
qdf_mem_copy(&cmd->hang_event_version, QDF_HANG_EVENT_VERSION,
sizeof(QDF_HANG_EVENT_VERSION));
cds_hang_data->offset += total_len;
return NOTIFY_OK;