A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-14 16:46:15 -04:00
Code Issues Projects Releases Packages Wiki Activity
No description
5,409 commits 10 branches 0 tags 2.1 GiB
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Rajeev Kumar 67f5b87203 qcacld-3.0: Fix buffer overread & overflow in P2P LO handler 
Currently in __wlan_hdd_cfg80211_p2p_lo_start() there are multiple
issues with the incoming cfg80211 vendor command handling:
1) A policy is not supplied when invoking nla_parse() which prevents
   basic sanity of the incoming attribute stream.
2) The length of attribute QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_DEVICE_TYPES
   is not properly validated.
3) The length of attribute QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_VENDOR_IE
   is not properly validated.

To address these issues:
1) Create an appropriate nla_policy and specify this policy when
   invoking nla_parse().
2) Validate the length of QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_DEVICE_TYPES
   properly to prevent potential over read.
3) Validate the length of QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_VENDOR_IE
   properly to prevent potential over read.

Change-Id: I0a76dad8cccc6158f7ef3da293a6462acd839bfb
CRs-Fixed: 2054755
2017-06-18 14:36:59 -07:00
core qcacld-3.0: Fix buffer overread & overflow in P2P LO handler 2017-06-18 14:36:59 -07:00
uapi/linux
Android.mk qcacld-3.0: Use absolute path for header files 2017-04-09 13:57:23 -07:00
Kbuild qcacld-3.0: Use refactored unit-test suspend APIs 2017-06-16 09:49:26 -07:00
Kconfig qcacld-3.0: Enable DPTRACE for perf and production builds 2017-05-16 00:46:25 -07:00
Makefile
README.txt

README.txt 

This is CNSS WLAN Host Driver for products starting from iHelium