No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Vinod Kumar Myadam 074d285597 qcacmn: Fix out-of-bounds of src_freq
When handling WMI_ROAM_SCAN_STATS_EVENTID,
the number of channels scanned for each roam trigger is fetched from
wmi_roam_scan_info TLV (wmi_roam_scan_info->roam_scan_channel_count),
The total number of channels for all the roam triggers is fetched from
param_buf->num_roam_scan_chan_info.

chan_idx is the index used to fetch the current channel info TLV to be
read. So if wmi_roam_scan_info->roam_scan_channel_count provided by
firmware exceeds the total param_buf->num_roam_scan_chan_info starting
from given chan_idx then OOB access of event buffer can happen.

To avoid this, validate the sum of the current chan_idx and
src_data->roam_scan_channel_count against
evt_buf->num_roam_scan_chan_info.

Change-Id: Ied94464d1f12690cf8832962b94595c2e00c33f8
CRs-Fixed: 3357714
2023-03-15 23:25:27 -07:00
cfg
dp qcacmn: Add a tid check for RX to avoid of OOB access 2022-10-11 11:05:54 +05:30
ftm
global_lmac_if
hal/wifi3.0 qcacmn: Increase status size for HTT WBM completion v3 2022-06-02 01:14:59 -07:00
hif qcacmn: Remove logic to enable/disable wake msi for drv systems 2023-01-05 06:59:12 -08:00
htc qcacmn: additional runtime PM stats for HTC layer 2021-05-21 02:58:26 -07:00
init_deinit/dispatcher
iot_sim
os_if/linux qcacmn: Add a new QCA vendor attribute to configure wifi calling (wfc) state 2023-01-12 19:52:54 +05:30
qal
qdf qcacmn: Add support for tx flags for packet capture mode 2022-03-07 22:54:48 -08:00
scheduler qcacmn: Handle gracefully if scheduler cb is not registered 2022-08-17 16:04:02 +05:30
spectral
target_if qcacmn: Fetch fw cap to support p2p + p2p concurrency 2023-02-08 01:17:32 -08:00
umac qcacmn: Fix 6 GHz bss HE capable beamformee score 2023-02-08 21:30:45 -08:00
utils qcacmn: Add DEBUG_CONN_RSO log history 2021-12-27 18:33:27 -08:00
wbuff qcacmn: Avoid possible out of array access 2021-12-13 02:54:25 -08:00
wlan_cfg qcacmn: Add ini to set priority for TC ingress filter 2022-07-05 15:16:10 +05:30
wmi qcacmn: Fix out-of-bounds of src_freq 2023-03-15 23:25:27 -07:00
README.txt
VERSION.txt

 This is CNSS WLAN Host Driver for products starting from iHelium