diff options
| author | Will Huang <wilhuang@codeaurora.org> | 2019-04-04 16:08:13 +0800 |
|---|---|---|
| committer | nshrivas <nshrivas@codeaurora.org> | 2019-04-11 01:09:05 -0700 |
| commit | 06c02725f5dcca0623428db4f6f244f7689a4cf3 (patch) | |
| tree | 228cdf330cb14d4fee8932fa0bfc119019eac121 /scripts/gdb/linux/tasks.py | |
| parent | 3b7c89e740ca75c3ed549a7e1b4acd8043d51fec (diff) | |
qcacld-3.0: Fix possible OOB in wma_dcc_stats_event_handler
The correct element number of param_tlvs->stats_per_channel_list is
actually param_tlvs->num_stats_per_channel_list and thus the
qdf_mem_copy() can actually copy more bytes than are in the buffer
causing a buffer overread.
Fix it by checking fix_param->num_channels against the actually
param_tlvs->num_stats_per_channel_list before doing memory copy.
Change-Id: I610920ac1d0a927a52de83935616e8e8fdfec7e7
CRs-Fixed: 2428212
Diffstat (limited to 'scripts/gdb/linux/tasks.py')
0 files changed, 0 insertions, 0 deletions