A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-14 16:46:15 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Fix OOB issue when access wma_find_vdev_by_addr

Browse source 
The function 'wma_find_vdev_by_addr' returns pointer to cdp_vdev, so
should avoid to comapre with QDF_STATUS_SUCCESS.

Change-Id: I45716651c89a53341d09737d83556bc515858361
CRs-Fixed: 3346764

Mot-CRs-fixed: (CR)
CVE- fixed: CVE-2023-21669
QC-CR#3346764
Signed-off-by: Sipra Patel <siprap@motorola.com>
Change-Id: I45716651c89a53341d09737d83556bc515858361
Reviewed-on: https://gerrit.mot.com/2594404
SLTApproved: Slta Waiver
SME-Granted: SME Approvals Granted
Tested-by: Jira Key
Reviewed-by: Zhengjie Zhu <zhuzj5@motorola.com>
Reviewed-by: Bin Liu <liubin7@motorola.com>
Submit-Approved: Jira Key
This commit is contained in:
Wu Gao 2022-12-06 16:31:04 +08:00 • committed by panyq6
commit f4d4ad9376
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
core/wma/src/wma_mgmt.c
View file

@ -3456,7 +3456,7 @@ int wma_form_rx_packet(qdf_nbuf_t buf,
if (status)
return status;
} else if (wma_find_vdev_id_by_addr(wma_handle, wh->i_addr1,
&vdev_id) == QDF_STATUS_SUCCESS) {
&vdev_id)) {
status = wma_check_and_process_rmf_frame(wma_handle,
vdev_id,
&wh,