No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pragaspathi Thilagaraj 0008879d13 qcacld-3.0: Fix OOB write in wma_unified_debug_print_event_handler
The routine wma_unified_debug_print_event_handler logs the data from debug
print event handler. The param event data from firmware is copied to a
destination buffer .If the maximum size of the data exceeds or equals
BIG_ENDIAN_MAX_DEBUG_BUF for big endian hosts then possible OOB write will
occur in wma_unified_debug_print_event_handler. For other hosts, OOB read
could occur if datalen exceeds maximum firmware message size
WMI_SVC_MAX_SIZE.

Add check to validate datalen doesnot exceed the maximum firmware msg size
WMI_SVC_MAX_SIZE. Return failure if it exceeds.
Add check to ensure datalen doesnot exceed or equal the maximum buffer
length value for big endian hosts BIG_ENDIAN_MAX_DEBUG_BUF.
Invoke strlcpy instead of memcpy to ensure the string is null terminated
before printed.

Change-Id: I45943ae76d8fcf7b53e1f064c462d01cd6d00dcf
CRs-Fixed: 2211133
2018-04-05 01:29:46 -07:00
components qcacld-3.0: Fix implicit conversion of different enumeration type 2018-04-04 11:07:22 -07:00
core qcacld-3.0: Fix OOB write in wma_unified_debug_print_event_handler 2018-04-05 01:29:46 -07:00
uapi/linux
Android.mk
Kbuild qcacld-3.0: hdd: Refactor the Green AP feature 2018-04-04 11:07:19 -07:00
Kconfig qcacld-3.0: Separate macros for dfs offload 2018-03-23 03:18:22 -07:00
Makefile
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium