A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-13 16:16:15 -04:00
Code Issues Projects Releases Packages Wiki Activity
No description
9,840 commits 10 branches 0 tags 2.1 GiB
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pragaspathi Thilagaraj b9c4674fda qcacld-3.0: Fix Use after free in wma_vdev_start_resp_handler 
In the function wma_vdev_start_resp_handler when we recieve a
vdev start response event, we copy the req_msg->user_data to the
object hidden_ssid_restart of the structure
tpHalHiddenSsidVdevRestart. If hidden_ssid_restart_in_progress
flag is set for the corresponding vdev_id, then we post that
message to the PE and free the hidden_ssid_restart. If this
req_msg->user_data is used again if req_msg->msg_type is
WMA_CHNL_SWITCH_REQ , then a possible Use-After-Free will occur
in  wma_vdev_start_resp_handler.

When a channel switch request has occured, there will not be a
hidden ssid restart event in progress. So add check to validate
if the req_msg->msg_type == WMA_HIDDEN_SSID_VDEV_RESTART.

Change-Id: Ie3195b23ff136fbfd38fcd4d32e993d4cb016316
CRs-Fixed: 2216751
2018-04-24 02:30:37 -07:00
components qcacld-3.0: Add frag_header to support pre-wdi2.0 platform 2018-04-18 22:03:28 -07:00
core qcacld-3.0: Fix Use after free in wma_vdev_start_resp_handler 2018-04-24 02:30:37 -07:00
uapi/linux qcacld-3.0: Add protection for type_specific_data in ath_pktlog_hdr 2018-03-18 20:58:16 -07:00
Android.mk
Kbuild qcacld-3.0: Add DFS master feature flag 2018-04-23 00:30:46 -07:00
Kconfig qcacld-3.0: Remove obsolete CONFIG_PRIMA_WLAN_11AC_HIGH_TP 2018-04-11 03:37:50 -07:00
Makefile
README.txt

README.txt 

This is CNSS WLAN Host Driver for products starting from iHelium