No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
wadesong bf39868cae qcacld-3.0: Fix an improper parameter type casting
In function csr_check_concurrent_channel_overlap, local
variable intf_ch is defined as uint16_t, but its pointer
is casted to uint32_t * before invoking
policy_mgr_get_sap_mandatory_channel, which will do
32-bit memory write and causes a stack memory over-
writing.

Call Trace:
  dump_stack+0x46/0x59
  print_address_description+0x66/0x22b
  kasan_report+0x21f/0x245
  policy_mgr_get_sap_mandatory_channel+0x1fd/0x258 [wlan]
  csr_check_concurrent_channel_overlap+0xf84/0x10d2 [wlan]
  sme_check_concurrent_channel_overlap+0xaa/0xf0 [wlan]
  wlansap_check_cc_intf+0x102/0x124 [wlan]
  wlan_hdd_get_channel_for_sap_restart+0x506/0x8f8 [wlan]
  policy_mgr_check_sta_ap_concurrent_ch_intf+0x35e/0x425[wlan]
  process_one_work+0x2cc/0x53b
  worker_thread+0x357/0x490

Change the type of the 2nd parameter to uint16_t within
function policy_mgr_get_sap_mandatory_channel, so only
16-bit memory writing will take place.

Change-Id: If514a394e65d005a1fe025c0e753bf7440dd5dde
CRs-Fixed: 2508798
2019-08-19 06:19:15 -07:00
components qcacld-3.0: Fix an improper parameter type casting 2019-08-19 06:19:15 -07:00
configs qcacld-3.0: Enable IPA3 for sdxprairie arch 2019-08-12 05:35:15 -07:00
core qcacld-3.0: Fix an improper parameter type casting 2019-08-19 06:19:15 -07:00
os_if qcacld-3.0: Fix nan disable issue on NAN+SAP concurrency 2019-07-16 17:15:00 -07:00
uapi/linux
Android.mk qcacld-3.0: set LOCAL_MODULE_TAGS to optional variant 2019-05-27 10:37:31 -07:00
Kbuild qcacld-3.0: Featurize partial reorder properly 2019-08-19 02:10:41 -07:00
Kconfig
Makefile
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium