No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pragaspathi Thilagaraj 6cf025f727 qcacld-3.0: Fix possible heap overflow in lim_update_ext_cap_ie
In the function lim_process_set_default_scan_ie_request, memory
of MAX_DEFAULT_SCAN_IE_LEN (2048) is allocated for local_ie_buf.
This local_ie_buf accommodates the ie data and also the ext
capabilities. If the local_ie_len, that is used to copy the
ie_data to local_ie_buf is greater than
MAX_DEFAULT_SCAN_IE_LEN(2048) - (DOT11F_IE_EXTCAP_MAX_LEN(15) +
EXT_CAP_IE_HDR_LEN(2)), then heap overflow could occur.

Validate the MAX_DEFAULT_SCAN_IE_LEN against the difference
between MAX_DEFAULT_SCAN_IE_LEN and sum of EXT_CAP_IE_HDR_LEN
and DOT11F_IE_EXTCAP_MAX_LEN.

Change-Id: Id2f950440d69ddb09090643f8a426061c0d336c3
CRs-Fixed: 2231300
2018-06-28 03:11:05 -07:00
components qcacld-3.0: Excessive logging from IPA 2018-06-27 12:04:45 -07:00
configs qcacld-3.0: Enable QCA6390 2018-06-27 16:14:14 -07:00
core qcacld-3.0: Fix possible heap overflow in lim_update_ext_cap_ie 2018-06-28 03:11:05 -07:00
uapi/linux qcacld-3.0: Map all module logs to per-level log APIs 2018-06-26 18:53:18 -07:00
Android.mk
Kbuild qcacld-3.0: Enable QCA6390 2018-06-27 16:14:14 -07:00
Kconfig
Makefile qcacld-3.0: Pass WLAN_ROOT value for make clean 2018-06-09 00:09:16 -07:00
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium