A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-11 07:03:09 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacmn: Possible buffer overflow while copying rnr info

Browse source 
A temporary variable "temp" is declared to use it while sorting
the channels based on the weightage/rnr info. This is declared
as a pointer to hold the reference of struct rnr_chan_weight but
memcpy is done to this without allocating memory.
Declare this as a variable instead of pointer to use it as an
intermediate variable for sorting.

Change-Id: If619f5fa462d5400f0a77e57317ac3c8debb34a5
CRs-Fixed: 2842819
This commit is contained in:
Srinivas Dasari 2020-12-21 23:03:12 +05:30 • committed by Gerrit - the friendly Code Review server
commit 70c4ce28b8
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
umac/scan/core/src/wlan_scan_manager_6ghz.c
View file

@ -54,7 +54,7 @@ scm_sort_6ghz_channel_list(struct wlan_objmgr_vdev *vdev,
uint8_t i, j = 0, max, tmp_list_count;
struct meta_rnr_channel *channel;
struct chan_info temp_list[MAX_6GHZ_CHANNEL];
struct rnr_chan_weight *rnr_chan_info, *temp;
struct rnr_chan_weight *rnr_chan_info, temp;
uint32_t weight;
struct wlan_objmgr_psoc *psoc;