No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pragaspathi Thilagaraj d9ad2ce5ea qcacmn: Fix possible OOB read in extract_pdev_utf_event_tlv
The function extract_pdev_utf_event_tlv, is called when the WMI
event WMI_PDEV_UTF_EVENTID is received. The event_buf
argument to it is fully FW controlled. There is an assumption
that the WMI message is at least the size of struct
wmi_host_utf_seg_header_info which could lead to OOB read issues
when a shorter message is sent.

Add fix to validate the event->datalen passed against
sizeof(struct wmi_host_utf_seg_header_info) before copying to
seg_hdr.

Change-Id: I1a8313f11013722edb601c009e59b1509fda3280
CRs-Fixed: 2305465
2018-09-06 16:13:24 -07:00
cfg qcacmn: Move cfg list create to dispatcher init 2018-08-22 11:59:34 -07:00
dp qcacmn: Account for fragmented packets 2018-09-06 11:48:16 -07:00
ftm qcacmn: Add FTM build flags 2018-08-29 14:03:02 -07:00
global_lmac_if qcacmn: Add spectral scan feature flag 2018-06-06 23:49:17 -07:00
hal/wifi3.0 qcacmn: Add apis to set and get ba ageing timeout 2018-09-04 11:53:43 -07:00
hif qcacmn: Disable CE-IRQ interrupt before cleaning up the tasklets 2018-09-05 23:55:47 -07:00
htc qcacmn: Remove QDF_BUG in htc_completion_handler 2018-08-28 13:09:53 -07:00
init_deinit/dispatcher qcacmn: Enable configuration component in dispatcher 2018-07-05 14:14:03 -07:00
os_if/linux qcacmn: Copy randomize configuration to sched_scan 2018-09-06 07:20:02 -07:00
qal qcacmn: Use appropriate dev handle in OS wrappers 2018-09-04 11:53:51 -07:00
qdf qcacmn: Separate out nbuf map/unmap code 2018-09-06 10:20:17 -07:00
scheduler qcacmn: Add scheduler history 2018-09-05 22:15:13 -07:00
spectral qcacmn: Extend target type checks of qca8074v1 to qca8074v2 2018-08-29 03:08:00 -07:00
target_if qcacmn: Fix NULL pointer dereference in dfs 2018-09-06 01:42:04 -07:00
umac qcacmn: Copy randomize configuration to sched_scan 2018-09-06 07:20:02 -07:00
utils qcacmn: Add more debug_ids and reduce the dump log level 2018-09-01 01:42:42 -07:00
wlan_cfg qcacmn: Increase the WBM2SW ring size to 8191 from 4096 2018-09-05 22:15:16 -07:00
wmi qcacmn: Fix possible OOB read in extract_pdev_utf_event_tlv 2018-09-06 16:13:24 -07:00
README.txt
VERSION.txt

 This is CNSS WLAN Host Driver for products starting from iHelium