diff options
| author | gaurank kathpalia <gkathpal@codeaurora.org> | 2018-10-05 14:48:51 +0530 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2018-10-05 02:19:57 -0700 |
| commit | aaecdb7db135977f42e88c4a16b4101e8e61725f (patch) | |
| tree | a94a5d400e6301fa39d5c5f819a8368afe63a9c3 /scripts/gdb/linux/tasks.py | |
| parent | 39c14f14f579f2a154ea42802f73499a681fa756 (diff) | |
qcacld-3.0: Add check for num_peers in wma_ibss_peer_info_event_handler
in wma_ibss_peer_info_event_handler, the driver has a upper
bound check on num_peers and not a lower bound check.
the num_peers should be a positive value.
Since there is no check to see if num_peers is set to 0,
this check can underflow and result in multiple OOB writes
once the loop has incremented more than 32 times.
Fix is to check whether num_peers is a positive value,
and return if not found true.
Change-Id: I599151cc6720ed931142ad6a519add6957fea467
CRs-Fixed: 2324139
Diffstat (limited to 'scripts/gdb/linux/tasks.py')
0 files changed, 0 insertions, 0 deletions
