A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-12 07:37:31 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Fix buffer over read in iwpriv WE_UNIT_TEST_CMD command

Browse source 
qcacld-2.0 to qcacld-3.0 propagation.

In current driver, WE_UNIT_TEST_CMD has below problem.
- apps_arg[1] can have zero value and can lead to
  buffer overead

Change the code to handle the number of args if user has
given zero.

CRs-Fixed: 1029540
Change-Id: Idc8e1d77d9623daeb98d0c4b7ad8a8d6cfa9c2d2
(cherry picked from commit 063a0db662927174d22af3b78402c63d7c388112)
This commit is contained in:
Anurag Chouhan 2016-09-03 16:38:01 +05:30 • committed by qcabuildsw
commit 77564183fc
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
core/hdd/src/wlan_hdd_wext.c
View file

@ -8002,8 +8002,9 @@ static int __iw_set_var_ints_getnone(struct net_device *dev,
apps_args[0]);
return -EINVAL;
}
if (apps_args[1] > (WMA_MAX_NUM_ARGS)) {
hdd_err("Too Many args %d",
if ((apps_args[1] > (WMA_MAX_NUM_ARGS)) ||
(apps_args[1] < 0)) {
hdd_err("Too Many/Few args %d",
apps_args[1]);
return -EINVAL;
}