A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-07 12:25:00 -04:00
Code Issues Projects Releases Packages Wiki Activity
No description
10,360 commits 10 branches 0 tags 2.1 GiB
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Krupali Dhanvijay b36b22d2c7 qcacmn: Fix out of bound read issue in ESP ie parse 
While parsing ESP IE from beacon/probe response frame,
the condition in loop to copy ESP_INFO from the ESP IE is
incorrect which will iterate for 5 times rather than 4 times,
this may cause OOB access.

data < ((uint8_t *)esp_ie + esp_ie->esp_len + 3)
Here adding 3 for esp_ie->esp_len, actually esp_len itself is
1 byte extra (esp_ len = ESP_ID_EXTN + ESP_INFO * 4),
but by adding 3 again will loop for one more iteration
this will cause OOB access.

Remove 3 in loop condition to avoid one more extra iteration
and ignore ESP_ID_EXTN element for total elements, in function
util_scan_update_esp_data.

Change-Id: Ia9226e483672369af36c6914e3ac914fe9de45e5
CRs-Fixed: 3710081
(cherry picked from commit 799a747940)
2024-03-11 03:01:42 -07:00
cfg qcacmn: Use correct format specifier to dump ini/cfg values 2021-03-29 15:19:37 -07:00
dp qcacmn: Update no. of DWORDs for htt_tx_msdu_desc_ext2_t 2024-02-08 05:00:18 -08:00
ftm
global_lmac_if qcacmn: Remove DA-Specific flags in DFS source code 2020-10-02 03:38:08 -07:00
hal/wifi3.0 qcacmn: Increase status size for HTT WBM completion v3 2022-06-02 01:14:59 -07:00
hif qcacmn: Remove logic to enable/disable wake msi for drv systems 2023-01-05 06:59:12 -08:00
htc qcacmn: Get wow nack reason code 2023-05-22 12:58:34 +05:30
init_deinit/dispatcher qcacmn: Initialize the interface module 2020-09-16 21:04:52 -07:00
iot_sim qcacmn: Maintain peer object refernce during frame delay 2020-09-16 07:11:14 -07:00
os_if/linux qcacmn: Define QCA vendor attribute for high RSSI roam trigger threshold 2023-12-29 01:59:00 -08:00
qal
qdf qcacmn: Add support for tx flags for packet capture mode 2022-03-07 22:54:48 -08:00
scheduler qcacmn: Handle gracefully if scheduler cb is not registered 2022-08-17 16:04:02 +05:30
spectral qcacmn: Remove direct attach reference in makefile 2020-09-03 01:58:36 -07:00
target_if qcacmn: Fetch fw cap to support p2p + p2p concurrency 2023-02-08 01:17:32 -08:00
umac qcacmn: Fix out of bound read issue in ESP ie parse 2024-03-11 03:01:42 -07:00
utils qcacmn: Get wow nack reason code 2023-05-22 12:58:34 +05:30
wbuff qcacmn: Avoid possible out of array access 2021-12-13 02:54:25 -08:00
wlan_cfg qcacmn: Add ini to set priority for TC ingress filter 2022-07-05 15:16:10 +05:30
wmi qcacmn: Support 5 GHz high RSSI roam 2023-12-29 01:59:11 -08:00
README.txt
VERSION.txt

README.txt 

 This is CNSS WLAN Host Driver for products starting from iHelium