A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-14 16:46:15 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Add sanity check for total_peer_len in wma_get_ll_stats_ext_buf

Browse source 
Add additional sanity checks for total_peer_len in wma_get_ll_stats_ext_buf.
Missing changes for CLD3.2 from I2689873c2c5e63c83e5059563662c0c69dc659fc

Change-Id: I6f82c9ef251e0290f9cf68e9fcd2d8868a5a302c
CRs-Fixed: 2121194
This commit is contained in:
Vignesh Viswanathan 2017-10-04 23:42:00 +05:30 • committed by snandini
commit ca67e368a2
1 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

9
core/wma/src/wma_utils.c
View file

@ -767,9 +767,12 @@ static tSirLLStatsResults *wma_get_ll_stats_ext_buf(uint32_t *len,
(sizeof(struct sir_wifi_tx) +
sizeof(struct sir_wifi_rx)));
}
if (peer_num > (WMI_SVC_MSG_MAX_SIZE /
(sizeof(struct sir_wifi_ll_ext_peer_stats) +
total_peer_len))) {
if (total_peer_len > WMI_SVC_MSG_MAX_SIZE) {
excess_data = true;
break;
}
if (peer_num > (WMI_SVC_MSG_MAX_SIZE - total_peer_len) /
sizeof(struct sir_wifi_ll_ext_peer_stats)) {
excess_data = true;
break;
} else {