No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Vignesh Viswanathan 59bf3d4bf0 qcacld-3.0: Fix potential OOB read in lim_parse_kde_elements
In function lim_parse_kde_elements, while parsing the KDE list from
the assoc response frame, elem_len is obtained from the frame buffer.
elem_len is then used to find the matching OUI for KDE OUI type and
then to calculate data_len based on the offset for the GTK/IGTK data
types.

If the value in elem_len field in the frame is less than the Data
Offset (which includes the OUI and data type) or the GTK/IGTK offset
then a OOB read would occur.

Add checks to validate the elem_len with Data offset and then with
the GTK/IGTK offset based on the data type.

Change-Id: I8ae31c6d6c28e88ad9bda757b3f1ff2585f8a553
CRs-Fixed: 2161920
2017-12-25 13:26:01 -08:00
components qcacld-3.0: Rename pmo_ucfg_* APIs to ucfg_pmo_* APIs 2017-12-07 13:27:12 -08:00
core qcacld-3.0: Fix potential OOB read in lim_parse_kde_elements 2017-12-25 13:26:01 -08:00
uapi/linux qcacld-3.0: Enable Packetlog for Napier 2017-12-09 23:27:07 -08:00
Android.mk qcacld-3.0: Correct symbolic link for wlan.ko 2017-08-06 05:00:09 -07:00
Kbuild qcacld-3.0: Add sysfs interface for retrieving version information 2017-12-20 02:26:54 -08:00
Kconfig qcacld-3.0: Add Kconfig option for feature flag 2017-10-18 07:49:26 -07:00
Makefile qcacld-3.0: accept module name externally 2016-06-01 10:48:46 -07:00
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium