No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pragaspathi Thilagaraj 33af3f4b1d qcacld-3.0: Fix possible buffer overflow in sir_convert_addts_rsp2_struct
In the function sir_convert_addts_rsp2_struct, iterator j is
assigned with the value pAddTs->numTclas + addts.num_WMMTCLAS.
The j value is used as the index to the array pAddTs->tclasInfo.
Maximum limit on  pAddTs->tclasInfo entries is 2. So when the
value of j exceeds 2, then a possible buffer overflow could
occur.

Validate the value of j against SIR_MAC_TCLASIE_MAXNUM(2).

Change-Id: Icc723380ed4ccd51c729194d509e288be0e0712c
CRs-Fixed: 2264429
2018-07-13 02:58:31 -07:00
components qcacld-3.0: Add IPA TX complete nbuf call back function 2018-07-10 15:39:58 -07:00
configs qcacld-3.0: Featurize wlan BMI 2018-07-12 12:34:43 -07:00
core qcacld-3.0: Fix possible buffer overflow in sir_convert_addts_rsp2_struct 2018-07-13 02:58:31 -07:00
uapi/linux qcacld-3.0: Map all module logs to per-level log APIs 2018-06-26 18:53:18 -07:00
Android.mk
Kbuild qcacld-3.0: Register target if ops for DP control ops 2018-07-12 18:02:02 -07:00
Kconfig
Makefile qcacld-3.0: Pass WLAN_ROOT value for make clean 2018-06-09 00:09:16 -07:00
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium