diff options
| author | Rajeev Kumar Sirasanagandla <rsirasan@codeaurora.org> | 2018-11-12 16:54:12 +0530 |
|---|---|---|
| committer | Rajeev Kumar Sirasanagandla <rsirasan@codeaurora.org> | 2018-11-13 19:33:56 +0530 |
| commit | d05aa97f348fc4e2497008cf9a36c1d2fe129a45 (patch) | |
| tree | 7d929da5b89aa42966a7d891436f827f3ea592b2 /lib/flex_array.c | |
| parent | 3514d2d0a1a2c6fd989e0e91963a9ba2aebab69f (diff) | |
qcacmn: Avoid buffer overflow in roam scan stats extract handler
In extract_roam_scan_stats_res_evt_tlv(), there is potential
buffer-overflow due to no input validation of following event
parameters from firmware:
(a) Roam scan frequencies against maximum value of 50
(WMI_ROAM_SCAN_STATS_CHANNELS_MAX) and
(b) Roam scan candidates against maximum value of 4
(WMI_ROAM_SCAN_STATS_CANDIDATES_MAX)
To fix this, validate roam scan stats event parameters.
Change-Id: I866b492f7ccb48c4960ff25a9e817cbdb394509e
CRs-Fixed: 2348299
Diffstat (limited to 'lib/flex_array.c')
0 files changed, 0 insertions, 0 deletions