No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Sourav Mohapatra 762ed1e51a qcacld-3.0: Prevent possible OOB access in hdd_sendactionframe
In the function hdd_sendactionframe, the parameters passed include the
payload and the corresponding payload length; payload being generic
pointer. The payload is then typecasted into the destination structure
of type tpSirMacVendorSpecificFrameHdr. If the size of the payload
specified in payload_len is less than the size of the destination
structure, there is possiblility of OOB read while accessing the same.

To prevent this security vulnerability, add a sanity check for the
payload_len against the size of the destination structure.

Change-Id: Ib0e7b7bfcf78412d81f18cf887e5296d80272598
CRs-Fixed: 2517858
2020-01-31 05:36:36 -08:00
components qcacld-3.0: Add an ini for separate iface support for NAN 2020-01-31 00:57:02 -08:00
configs qcacld-3.0: Disable PM_QOS feature in WHUNT config 2020-01-29 06:01:15 -08:00
core qcacld-3.0: Prevent possible OOB access in hdd_sendactionframe 2020-01-31 05:36:36 -08:00
os_if qcacld-3.0: Selectively reduce the hdd/osif logs 2020-01-27 17:36:34 -08:00
uapi/linux qcacld-3.0: Add PKTLOG_TYPE_RX_STATBUF 2019-10-09 19:10:36 -07:00
Android.mk
Kbuild qcacld-3.0: Provide soc objmgr to hif 2020-01-27 15:42:46 -08:00
Kconfig
Makefile
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium