A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-10 22:40:54 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacmn: Discard QMI events when message with invalid length

Browse source 
Currently QMI message length is not being validated before
handling QMI event. This is resulting in illegal memory access
when QMI message length is invalid.

To address this, discard QMI events with invalid length.

Change-Id: Ia9f04bcb4fa3b365cbbf2be8885a8d30f78f8f10
CRs-Fixed: 2839277
This commit is contained in:
Bapiraju Alla 2020-12-16 12:42:46 +05:30 • committed by snandini
commit e2a792f9b7
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
wmi/src/wmi_unified.c
View file

@ -2559,7 +2559,7 @@ static int __wmi_process_qmi_fw_event(void *wmi_cb_ctx, void *buf, int len)
uint32_t evt_id;
int wmi_msg_len;
if (!wmi_handle || !buf)
if (!wmi_handle || !buf || (len < WMI_MIN_HEAD_ROOM))
return -EINVAL;
/**