mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-12 07:37:31 -04:00
No description
- C 98.2%
- Assembly 1%
- Makefile 0.3%
- Shell 0.2%
- Python 0.1%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
WLAN driver's vendor scan request handler function declares ie_len as uint8_t whereas kernel's cfg80211_scan_request ie_len is declared as size_t. This type mismatch for ie_len leads to WLAN driver allocating less memory on heap because of implicit integer overflow when kernel's ie_len(declared as size_t) is bigger than hex 0xFF and when scan request data is copied it overflows the allocated heap memory. In WLAN driver's vendor scan request handler declare ie_len and len also of type size_t such that always correct size heap memory is allocated and there is no heap overflow during memory copy. Change-Id: I240113d34c561c7155303b0b8b253c0cbaf7724b CRs-Fixed: 2145573 |
||
| components | ||
| core | ||
| uapi/linux | ||
| Android.mk | ||
| Kbuild | ||
| Kconfig | ||
| Makefile | ||
| README.txt | ||
This is CNSS WLAN Host Driver for products starting from iHelium