No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pragaspathi Thilagaraj 2d1b311af2 qcacld-3.0: Fix possible OOB in lim_chk_n_process_wpa_rsn_ie
In the function lim_chk_n_process_wpa_rsn_ie, if wpa IE is
present, then dot11f_unpack_ie_wpa is called to copy the wpa IE
to destination buffer. assoc_req->wpa.length is passed as the
length to copy the IE. As this length includes 4 bytes of the
OUI fields also, this could result in OOB read.

Change the length passed to the dot11f_unpack_ie_wpa as
(assoc_req->wpa.length - 4), so that the additional 4 bytes of
the OUI fields are excluded.

Change-Id: If972b3a19d239bb955c7b4d4c7d94e25aa878f21
CRs-Fixed: 2267557
2018-07-21 03:35:33 -07:00
components qcacld-3.0: Enable/Disable MC filter when connected 2018-07-20 10:46:49 -07:00
configs qcacld-3.0: Compile hal files based on QCA6390 2018-07-21 00:03:14 -07:00
core qcacld-3.0: Fix possible OOB in lim_chk_n_process_wpa_rsn_ie 2018-07-21 03:35:33 -07:00
uapi/linux qcacld-3.0: Map all module logs to per-level log APIs 2018-06-26 18:53:18 -07:00
Android.mk
Kbuild qcacld-3.0: Compile hal files based on QCA6390 2018-07-21 00:03:14 -07:00
Kconfig
Makefile qcacld-3.0: Pass WLAN_ROOT value for make clean 2018-06-09 00:09:16 -07:00
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium