No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Vignesh Viswanathan ad7eded05e qcacld-3.0: Fix buffer overflow in wma radio_tx_power_level_stats handler
In function wma_unified_radio_tx_power_level_stats_event_handler,
power_level_offset is received from the FW and is used to memcpy data
from FW to local tx_time_per_power_level for num_tx_power_levels length.
However tx_time_per_power_level is allocated only for
total_num_tx_power_levels length.
If the power_level_offset is greater than total_num_tx_power_levels, then
a buffer overwrite would occur.

Add sanity check to make sure power_level_offset does not exceed
total_num_tx_power_levels

Change-Id: Ia363512ee35bb0e30b137c20bf092238c2e356da
CRs-Fixed: 2149501
2017-11-29 09:26:15 -08:00
components qcacld-3.0: Enable D0WOW for pcie 2017-11-28 19:39:01 -08:00
core qcacld-3.0: Fix buffer overflow in wma radio_tx_power_level_stats handler 2017-11-29 09:26:15 -08:00
uapi/linux qcacld-3.0: Fix checkpatch warnings (QUOTED_WHITESPACE_BEFORE_NEWLINE) 2017-10-24 16:40:56 -07:00
Android.mk
Kbuild qcacld-3.0: Enable D0WOW for pcie 2017-11-28 19:39:01 -08:00
Kconfig qcacld-3.0: Add Kconfig option for feature flag 2017-10-18 07:49:26 -07:00
Makefile
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium