A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-12 07:37:31 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacmn: Validate number of entries in extract_host_mem_req_tlv()

Browse source 
Validate num_mem_reqs should be less than TLV size in
extract_host_mem_req_tlv() function.

Change-Id: I88ebfc4bfe3abb9b0926990f5f777fc0d62e1fc1
CRs-Fixed: 2347667
This commit is contained in:
Arif Hussain 2018-12-21 14:58:55 -08:00 • committed by nshrivas
commit 4576e298ca
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
wmi/src/wmi_unified_tlv.c
View file

@ -8157,6 +8157,12 @@ static host_mem_req *extract_host_mem_req_tlv(wmi_unified_t wmi_handle,
return NULL;
}
if (ev->num_mem_reqs > param_buf->num_mem_reqs) {
WMI_LOGE("Invalid num_mem_reqs %d:%d",
ev->num_mem_reqs, param_buf->num_mem_reqs);
return NULL;
}
*num_entries = ev->num_mem_reqs;
return (host_mem_req *)param_buf->mem_reqs;