No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Prakash Dhavali 075334eaec qcacld-3.0: Avoid overflow of roam subcmd params
This is a qcacld-2.0 to qcacld-3.0 propagation.

Currently when processing the QCA_NL80211_VENDOR_SUBCMD_ROAM vendor
command, for the following roam commands there are input validation
issues:
	QCA_WLAN_VENDOR_ATTR_ROAM_SUBCMD_SET_BSSID_PREFS
	QCA_WLAN_VENDOR_ATTR_ROAM_SUBCMD_SET_BLACKLIST_BSSID

Both of these commands have a "number of BSSIDs" attribute as well as a
list of BSSIDs. However there is no validation that the number of
BSSIDs provided won't overflow the destination buffer.  In addition
there is no validation that the number of BSSIDs actually provided
matches the number of BSSIDs expected.

To address these issues, for the above mentioned commands:
* Verify that the expected number of BSSIDs doesn't exceed the maximum
  allowed number of BSSIDs
* Verify that the actual number of BSSIDs supplied doesn't exceed the
  expected number of BSSIDs
* Only process the actual number of supplied BSSIDs if it is less than
  the expected number of BSSIDs.

Change-Id: Ifa6121ee1b1441ec415198897ef815b40cb5aff6
CRs-Fixed: 1092497
2017-01-09 15:46:28 -08:00
core qcacld-3.0: Avoid overflow of roam subcmd params 2017-01-09 15:46:28 -08:00
uapi/linux qcacld-3.0: Add support for multiple instances of the host driver 2016-12-14 14:08:37 -08:00
Android.mk qcacld-3.0: Add new method to build/use driver based on targets 2016-04-25 22:55:34 -07:00
Kbuild qcacld-3.0: Add Host Driver support for Chip Power stats debugfs 2017-01-09 11:21:43 -08:00
Kconfig qcacld-3.0: Support southbound interface 2016-12-21 03:12:35 -08:00
Makefile qcacld-3.0: accept module name externally 2016-06-01 10:48:46 -07:00
README.txt Initial readme for WLAN Host Driver for iHelium 2015-04-06 11:45:23 -07:00

This is CNSS WLAN Host Driver for products starting from iHelium