No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Ashish Kumar Dhanotiya b01e45b865 qcacld-3.0: Validate assoc response IE len before copy
When host sends ft assoc response to supplicant, it
allocates a buffer of fixed size and copies a variable
length of assoc response IEs to this fixed sized buffer.
There is a possibility of OOB write to the allocated buffer
if the assoc response IEs length is greater than the
allocated buffer size.

To avoid above issue validate the assoc response IEs length
with the allocated buffer size before data copy to the buffer.

Change-ID: Ife9c2071a8cc4a2918b9f349f4024478f94b2d78
CRs-Fixed: 2575144
2019-12-16 16:17:11 -08:00
components qcacld-3.0: Vdev trans return directly if psoc/driver is in transition 2019-12-16 14:19:12 -08:00
configs qcacld-3.0: Fix compile issues when some features are disabled 2019-12-16 06:35:16 -08:00
core qcacld-3.0: Validate assoc response IE len before copy 2019-12-16 16:17:11 -08:00
os_if qcacld-3.0: Fix compile issues when some features are disabled 2019-12-16 06:35:16 -08:00
uapi/linux qcacld-3.0: Add PKTLOG_TYPE_RX_STATBUF 2019-10-09 19:10:36 -07:00
Android.mk qcacld-3.0: Disable the module under QMAA 2019-09-18 19:02:04 -07:00
Kbuild qcacld-3.0: Enable config HAL_DISABLE_NON_BA_2K_JUMP_ERROR 2019-12-12 14:52:02 -08:00
Kconfig
Makefile
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium