No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Jyoti Kumari 96ab6f29d4 qcacld-3.0: Fix integer underflow in assoc response frame
In func aead_decrypt_assoc_rsp(), it calls
find_ie_data_after_fils_session_ie() to find IE pointer after
FILS session IE from the frame payload.
There is possibility of integer underflow if frame payload length is
less than FIXED_PARAM_OFFSET_ASSOC_RSP which may increase value
of buf_len variable in find_ie_data_after_fils_session_ie() and
cause OOB during parsing process.

Validate frame payload length with FIXED_PARAM_OFFSET_ASSOC_RSP,
if it is less then return failure.

Change-Id: I78fbcfeaa1058fcf2a6fe47cd5c26390b54974af
CRs-Fixed: 2859024
2021-02-13 09:21:37 -08:00
components qcacld-3.0: Fix fwol event handlers register/unregister sequence 2021-02-12 14:56:51 -08:00
configs qcacld-3.0: decouple bw monitor from WDI3_STATS_UPDATE 2021-02-03 20:21:05 -08:00
core qcacld-3.0: Fix integer underflow in assoc response frame 2021-02-13 09:21:37 -08:00
os_if qcacld-3.0: Fix get sap connected sta info fcs counter always 0 2021-01-26 03:29:06 -08:00
uapi/linux qcacld-3.0: Add PKTLOG_TYPE_RX_STATBUF 2019-10-09 19:10:36 -07:00
Android.mk qcacld-3.0: Add flags to the BUILD_TAG 2021-02-12 12:47:08 -08:00
Kbuild qcacld-3.0: Add flags to the BUILD_TAG 2021-02-12 12:47:08 -08:00
Kconfig
Makefile
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium