A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-12 07:37:31 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Validate kek_len in wlan_hdd_save_gtk_offload_params

Browse source 
Although the kek_len should have already been validated before the
function is called, update wlan_hdd_save_gtk_offload_params() to limit
kek_len to the maximum allowed value before using it to copy the kek.

Change-Id: I0676521171343c6fe58afcdc31477f555598c490
CRs-Fixed: 2140033
This commit is contained in:
Jeff Johnson 2017-11-14 14:42:55 -08:00 • committed by snandini
commit e1f2b0e66a
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
core/hdd/src/wlan_hdd_cfg80211.c
View file

@ -5549,8 +5549,14 @@ void wlan_hdd_save_gtk_offload_params(struct hdd_adapter *adapter,
if (kck_ptr)
qdf_mem_copy(gtk_req->kck, kck_ptr, NL80211_KCK_LEN);
if (kek_ptr)
if (kek_ptr) {
/* paranoia */
if (kek_len > sizeof(gtk_req->kek)) {
kek_len = sizeof(gtk_req->kek);
QDF_ASSERT(0);
}
qdf_mem_copy(gtk_req->kek, kek_ptr, kek_len);
}
qdf_copy_macaddr(&gtk_req->bssid, &hdd_sta_ctx->conn_info.bssId);