A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-13 00:00:00 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Validate number of bytes before memory allocation

Browse source 
Currently, In function hdd_get_roam_scan_ch_cb memory
is allocated for event response buffer for invalid len.

Fix is to add a validation check for len before alloction
of memory to avoid memory allocation for invalid len.

Change-Id: I14cffdace868fc19358322c36dd2589d7845b8fa
CRs-Fixed: 2640114
This commit is contained in:
sheenam monga 2020-03-16 11:53:23 +05:30 • committed by nshrivas
commit a89f7ed3a3
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
core/hdd/src/wlan_hdd_ioctl.c
View file

@ -4025,6 +4025,10 @@ void hdd_get_roam_scan_ch_cb(hdd_handle_t hdd_handle,
*/
if (!roam_ch->command_resp) {
len = roam_ch->num_channels * sizeof(roam_ch->chan_list[0]);
if (!len) {
hdd_err("Invalid len");
return;
}
event = (uint8_t *)qdf_mem_malloc(len);
if (!event) {
hdd_err("Failed to alloc event response buf vdev_id: %d",