No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Abhinav Kumar db3c6f57e3 qcacld-3.0: Fix out-of-bounds access in lim_process_assoc_req_frame
Currently the function lim_process_assoc_req_frame uses frame_len
without validation to parse the IE buffer which could lead to
out-of-bounds memory access if the frame_len is less than or
equal to LIM_ASSOC_REQ_IE_OFFSET(4).

Add check to validate the frame_len with LIM_ASSOC_REQ_IE_OFFSET
before sending (frame_len - LIM_ASSOC_REQ_IE_OFFSET) to
cfg_get_vendor_ie_ptr_from_oui to parse only the IE buffer.

Change-Id: Iaa9e8db4a2605169c9ad3904878a2e626eb6de8b
CRs-Fixed: 2259707
2018-06-25 14:12:45 -07:00
components qcacld-3.0: Fix IPA Rx suspend timeout due to IPA Tx pipe stall 2018-06-22 22:19:04 -07:00
configs qcacld-3.0: Enable SMMU S1 TRANSLATION 2018-06-22 13:02:28 -07:00
core qcacld-3.0: Fix out-of-bounds access in lim_process_assoc_req_frame 2018-06-25 14:12:45 -07:00
uapi/linux qcacld-3.0: Fix for parsing raw pktlog data 2018-06-13 12:30:32 -07:00
Android.mk
Kbuild qcacld-3.0: Featurize WLAN_FEATURE_LINK_LAYER_STATS 2018-06-21 00:24:23 -07:00
Kconfig qcacld-3.0: Remove obsolete CONFIG_PRIMA_WLAN_11AC_HIGH_TP 2018-04-11 03:37:50 -07:00
Makefile qcacld-3.0: Pass WLAN_ROOT value for make clean 2018-06-09 00:09:16 -07:00
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium