diff options
| author | Debasis Das <ddas@codeaurora.org> | 2018-04-04 17:17:55 +0530 |
|---|---|---|
| committer | Debasis Das <ddas@codeaurora.org> | 2020-01-21 15:03:35 +0530 |
| commit | 7789c4682b931c9e911f934e727ac5d9cb0b6087 (patch) | |
| tree | 90e2c046e5e09c70aed05c55725f2932820d52bc /kernel/range.c | |
| parent | 35e0ae41c368c9f8ec341cfee7ab28a381ff3da6 (diff) | |
qcacmn: Fix Integer Overflow Leading to Buffer Overflow
wmi_buf_alloc() API expects length to be passed of type
uint16_t. However, the callers pass uint32_t to it.
This might result in overflow and illegal memory access
thereafter. The fix is to modify the API signature accordingly.
Change-Id: If09da4978d421269b884f7d3c933c49c81651475
CRs-Fixed: 2218346
Diffstat (limited to 'kernel/range.c')
0 files changed, 0 insertions, 0 deletions