No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pragaspathi Thilagaraj f4547d9764 qcacmn: Fix possible OOB read in extract_chainmask_tables_tlv
When WMI_SERVICE_READY_EXT_EVENT is received from firmware, the
function extract_chainmask_tables_tlv is called to update the
soc caps and other capabilities to the host. hw_caps is
extracted directly from the param_buf value received from the
firmware and hw_caps->num_chainmask_tables is used to traverse
through the chainmask table and update the values to it from the
param_buf->mac_phy_chainmask_caps. hw_caps->num_chainmask_tables
is validated against PSOC_MAX_CHAINMASK_TABLES but not against
param_buf->num_mac_phy_chainmask_combo. This can cause potential
out of bound read in extract_chainmask_tables_tlv.

Validate the value of the hw_caps->num_chainmask_tables received
from the firmware against param_buf->num_mac_phy_chainmask_combo
before updating chainmask_table.

Change-Id: Ibf438760a9219f4ff82d29b42aa30f4dcf626364
CRs-Fixed: 2336842
2018-10-24 23:00:20 -07:00
cfg qcacmn: Add green ap params 2018-10-16 04:35:04 -07:00
dp qcacmn: Appropriate WDS and MEC entry has been made 2018-10-24 03:17:11 -07:00
ftm qcacmn: Fix possible OOB write in wlan_ftm_process_utf_event 2018-09-07 21:46:49 -07:00
global_lmac_if
hal/wifi3.0 qcacmn: Flush REO descriptors entirely 2018-10-18 02:17:04 -07:00
hif qcacmn: Pass product_id to hif_get_device_type() 2018-10-19 04:38:36 -07:00
htc qcacmn: Do epping credit allocation for USB also 2018-10-08 08:11:43 -07:00
init_deinit/dispatcher qcacmn: Add green ap params 2018-10-16 04:35:04 -07:00
os_if/linux qcacmn: remove time-consuming debug log 2018-10-23 08:11:53 -07:00
qal qcacmn: Use appropriate dev handle in OS wrappers 2018-09-04 11:53:51 -07:00
qdf qcacmn: Return success when debugfs is disabled 2018-10-23 12:06:25 -07:00
scheduler qcacmn: Record queue depth in scheduler history 2018-10-16 18:35:57 -07:00
spectral qcacmn: Move out spectral DA files 2018-10-11 08:56:46 -07:00
target_if qcacmn: fftbin size WAR for HK V2 2018-10-24 08:17:42 -07:00
umac qcacmn: Add chan change HW mode change 2018-10-24 23:00:17 -07:00
utils qcacmn: Abstract BMI and add export symbols for ko separation 2018-10-18 06:32:45 -07:00
wbuff qcacmn: Update debug info in wbuff_buff_get() 2018-10-16 21:21:15 -07:00
wlan_cfg qcacmn: Flush REO descriptors entirely 2018-10-18 02:17:04 -07:00
wmi qcacmn: Fix possible OOB read in extract_chainmask_tables_tlv 2018-10-24 23:00:20 -07:00
README.txt
VERSION.txt

 This is CNSS WLAN Host Driver for products starting from iHelium