No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Vignesh Viswanathan a2ef8b1904 qcacld-3.0: Fix OOB read in wma_mgmt_tx_bundle_completion_handler
In function wma_mgmt_tx_bundle_completion_handler
cmpl_params->num_reports, param_buf->desc_ids and param_buf->status
are received from the FW. num_reports is used as array index to access
desc_ids and status. If the value of num_reports exceeds the max
allowed array index, out of bounds access would happen.

Add sanity check to make sure num_reports does not exceed the max
allowed limit. Also make sure num_reports is not greater than
num_desc_ids and num_status

Change-Id: I300411febf6449680e873e5947fa767298afe962
CRs-Fixed: 2119439
2017-10-25 23:40:50 -07:00
components qcacld-3.0: Clean up unwanted blank lines from wlan_pmo_obj_mgmt_api.c 2017-10-24 23:50:36 -07:00
core qcacld-3.0: Fix OOB read in wma_mgmt_tx_bundle_completion_handler 2017-10-25 23:40:50 -07:00
uapi/linux qcacld-3.0: Fix checkpatch warnings (QUOTED_WHITESPACE_BEFORE_NEWLINE) 2017-10-24 16:40:56 -07:00
Android.mk qcacld-3.0: Correct symbolic link for wlan.ko 2017-08-06 05:00:09 -07:00
Kbuild qcacld-3.0: Enable TSO segmentation debug for SLUB 2017-10-25 13:41:11 -07:00
Kconfig qcacld-3.0: Add Kconfig option for feature flag 2017-10-18 07:49:26 -07:00
Makefile
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium