No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Vignesh Viswanathan 228645aa79 qcacld-3.0: Validate TLV length in FILS wrapped data before processing
While processing FILS EAP TLVs present in FILS wrapped data in Auth Frame,
the tlv->length from the frame is used as the length to copy the buffer
into the FILS auth info without validating if the received buffer
length is at least greater than the length value in the TLV buffer.
This would lead to OOB read if the TLV length present in the frame is
greater than the actual data_len of the FILS wrapped data.

Add sanity check to return error if tlv->length is greater than wrapped
data_len + 2 with 2 bytes for the TLV header.

Change-Id: Ibe1183c8e318ceb75db6278c935786322a029d5c
CRs-Fixed: 2245944
2018-06-08 10:11:54 -07:00
components qcacld-3.0: PMO feature flag disable (part two) 2018-06-08 08:31:00 -07:00
configs qcacld-3.0: PMO feature flag disable (part two) 2018-06-08 08:31:00 -07:00
core qcacld-3.0: Validate TLV length in FILS wrapped data before processing 2018-06-08 10:11:54 -07:00
uapi/linux qcacld-3.0: Featurize packet log 2018-06-06 23:49:08 -07:00
Android.mk qcacld-3.0: Correct symbolic link for wlan.ko 2017-08-06 05:00:09 -07:00
Kbuild qcacld-3.0: PMO feature flag disable (part two) 2018-06-08 08:31:00 -07:00
Kconfig qcacld-3.0: Remove obsolete CONFIG_PRIMA_WLAN_11AC_HIGH_TP 2018-04-11 03:37:50 -07:00
Makefile qcacld-3.0: Allow out-of-tree build with relative path in M 2018-02-09 11:33:09 -08:00
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium