A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-15 01:01:56 -04:00
Code Issues Projects Releases Packages Wiki Activity
No description
5,492 commits 10 branches 0 tags 2.1 GiB
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pragaspathi Thilagaraj 68e058b24d qcacmn: Fix possible OOB write in wlan_ftm_process_utf_event 
The function wlan_ftm_process_utf_event, is invoked upon the
reception of the WMI event WMI_PDEV_UTF_EVENTID. The event_buf
argument to it is fully FW controlled.  There are two issues
here:
1. event.datalen of type uint32_t is assigned to utf_datalen of
type uint16_t which can lead to a possible integer underflow.
2. utf_datalen is calculated as the difference of event.datalen
and sizeof(seghdr_info), without validating if datalen is not
less than sizeof(seghdr_info). This could cause a potential OOB
write as utf_datalen is used as the size to copy utf_data to
ftm_pdev_obj->data.

Add fix to change the type of utf_datalen to uint32_t.

Change-Id: Ibd61b4ef8cd514d43f212174e745b1c76af1047d
CRs-Fixed: 2305477
2018-09-07 21:46:49 -07:00
cfg qcacmn: Move cfg list create to dispatcher init 2018-08-22 11:59:34 -07:00
dp qcacmn: Set nbuf frag list to NULL 2018-09-06 16:13:27 -07:00
ftm qcacmn: Fix possible OOB write in wlan_ftm_process_utf_event 2018-09-07 21:46:49 -07:00
global_lmac_if qcacmn: Add spectral scan feature flag 2018-06-06 23:49:17 -07:00
hal/wifi3.0 qcacmn: Add apis to set and get ba ageing timeout 2018-09-04 11:53:43 -07:00
hif qcacmn: Disable bh while holding completion_freeq_lock in process context 2018-09-07 15:33:26 -07:00
htc qcacmn: Remove QDF_BUG in htc_completion_handler 2018-08-28 13:09:53 -07:00
init_deinit/dispatcher qcacmn: Enable configuration component in dispatcher 2018-07-05 14:14:03 -07:00
os_if/linux qcacmn: Copy randomize configuration to sched_scan 2018-09-06 07:20:02 -07:00
qal qcacmn: Use appropriate dev handle in OS wrappers 2018-09-04 11:53:51 -07:00
qdf qcacmn: Separate out nbuf map/unmap code 2018-09-06 10:20:17 -07:00
scheduler qcacmn: Add scheduler history 2018-09-05 22:15:13 -07:00
spectral qcacmn: Extend target type checks of qca8074v1 to qca8074v2 2018-08-29 03:08:00 -07:00
target_if qcacmn: Add fft bin size WAR check 2018-09-07 03:04:12 -07:00
umac qcacmn: Do not remove id when tx action frame 2018-09-07 19:02:33 -07:00
utils qcacmn: Add more debug_ids and reduce the dump log level 2018-09-01 01:42:42 -07:00
wlan_cfg qcacmn: Increase the WBM2SW ring size to 8191 from 4096 2018-09-05 22:15:16 -07:00
wmi qcacmn: Add wmi support to get firmware roam scan stats 2018-09-07 03:04:10 -07:00
README.txt
VERSION.txt

README.txt 

 This is CNSS WLAN Host Driver for products starting from iHelium