diff options
| author | Pragaspathi Thilagaraj <tpragasp@codeaurora.org> | 2018-04-02 17:15:04 +0530 |
|---|---|---|
| committer | nshrivas <nshrivas@codeaurora.org> | 2018-04-03 18:01:33 -0700 |
| commit | 4c74687be66c19be0b9bd83d78d033dff5d1a9ae (patch) | |
| tree | 306751611a6e5a90376260e88656631036c64f01 /scripts/objdiff | |
| parent | 367768e3e5e2543659998d6e2246664ad353a296 (diff) | |
qcacld-3.0: Fix OOB write in wma_roam_synch_event_handler
The routine wma_roam_synch_event_handler sends roam indication to the
upper layers. It uses the vdev_id of the synch event to pass the roaming
indication for the vdev session. If the vdevid exceeds the max_bssid
supported, then OOB write occurs in wma_roam_synch_event_handler.
Add check to validate vdev doesnot exceed the maximum bssid configured.
Add check to ensure vdev doesnot exceed max_bssid and return error if
violated.
Change-Id: Ief8b5070fd6cbb375900e2816524dbd946c5238d
CRs-Fixed: 2206569
Diffstat (limited to 'scripts/objdiff')
0 files changed, 0 insertions, 0 deletions