A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-11 07:03:09 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Fix buffer overwrite in lim_mlm_add_bss()

Browse source 
Fix buffer overwrite in lim_mlm_add_bss() by adding validated
value for copy.

Change-Id: I795c36e8bc27171eca96bffe05d413dc561a7d01
CRs-Fixed: 2254709
This commit is contained in:
Tushnim Bhattacharyya 2018-06-05 13:19:06 -07:00 • committed by nshrivas
commit 6deb27f0c6
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
core/mac/src/pe/lim/lim_process_mlm_req_messages.c
View file

@ -514,7 +514,7 @@ lim_mlm_add_bss(tpAniSirGlobal mac_ctx,
addbss_param->rateSet.numRates = SIR_MAC_RATESET_EID_MAX;
}
qdf_mem_copy(addbss_param->rateSet.rate, mlm_start_req->rateSet.rate,
mlm_start_req->rateSet.numRates);
addbss_param->rateSet.numRates);
addbss_param->nwType = mlm_start_req->nwType;
addbss_param->htCapable = mlm_start_req->htCapable;