No description
  • C 98.2%
  • Assembly 1%
  • Makefile 0.3%
  • Shell 0.2%
  • Python 0.1%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pragaspathi Thilagaraj fda1af6bef qcacld-3.0: Fix OOB write in wma_passpoint_match_event_handler
In the function wma_passpoint_match_event_handler, fixed param event data
from firmware is filled in the destination buffer and indication is sent
to upper layers. The buffer allocation is done for the size
(wmi_passpoint_event_hdr*) + event->ie_length + event->anqp_length. The
maximum firmware event message size is WMI_SVC_MSG_MAX_SIZE. If either,
ie_length and anqp_length combined is greater than WMI_SVC_MSG_MAX_SIZE or
either of the two exceeds WMI_SVC_MSG_MAC_SIZE, an OOB write will occur in
wma_passpoint_match_event_handler.

Add check to ensure either of the values ie_length or anqp_lenth or
(ie_length + anqp_length) doesnt exceed the WMI_SVC_MAX_SIZE. Return
failure if it exceeds.

Change-Id: I21f473ca0b99ebb8488f2cca3c0774817ea97c3a
CRs-Fixed: 2201190
2018-03-13 23:18:00 -07:00
components qcacld-3.0: Fix PERF build issue in PMO (part 2) 2018-03-08 18:46:54 -08:00
core qcacld-3.0: Fix OOB write in wma_passpoint_match_event_handler 2018-03-13 23:18:00 -07:00
uapi/linux qcacld-3.0: Enable Packetlog for Napier 2017-12-09 23:27:07 -08:00
Android.mk qcacld-3.0: Correct symbolic link for wlan.ko 2017-08-06 05:00:09 -07:00
Kbuild qcacld-3.0: Remove -DUSE_NEW_TDLS_PEER_CALLBACKS 2018-03-12 19:27:37 -07:00
Kconfig qcacld-3.0: Remove FW memory dump feature 2017-12-28 11:54:10 +05:30
Makefile qcacld-3.0: Allow out-of-tree build with relative path in M 2018-02-09 11:33:09 -08:00
README.txt Initial readme for WLAN Host Driver for iHelium 2015-04-06 11:45:23 -07:00

This is CNSS WLAN Host Driver for products starting from iHelium