A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-14 16:46:15 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Add check for firmware message length

Browse source 
Add check for buffer size in function wma_encrypt_decrypt_msg_handler

Change-Id: I6dbead1d4996c5128cadc3ef071540fa0694201e
CRs-Fixed: 2119060
This commit is contained in:
Amar Singhal 2017-10-03 14:36:55 -07:00 • committed by snandini
commit 7f5642ae4b
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
core/wma/src/wma_features.c
View file

@ -5125,6 +5125,14 @@ int wma_encrypt_decrypt_msg_handler(void *handle, uint8_t *data,
encrypt_decrypt_rsp_params.vdev_id = data_event->vdev_id;
encrypt_decrypt_rsp_params.status = data_event->status;
if (data_event->data_length > param_buf->num_enc80211_frame) {
WMA_LOGE("FW msg data_len %d more than TLV hdr %d",
data_event->data_length,
param_buf->num_enc80211_frame);
return -EINVAL;
}
encrypt_decrypt_rsp_params.data_length = data_event->data_length;
if (encrypt_decrypt_rsp_params.data_length) {