diff options
| author | Abhinav Kumar <abhikuma@codeaurora.org> | 2017-12-21 16:43:37 +0530 |
|---|---|---|
| committer | snandini <snandini@codeaurora.org> | 2018-01-12 18:45:25 -0800 |
| commit | 337d3b15f5c3b6a3059401f48a2e11916f7046f5 (patch) | |
| tree | 40bbd1d580cde16939be82c9adbcc67171ef528c /tools/perf/scripts/python/netdev-times.py | |
| parent | 7e41e699d3d3a6405375b7931a26832641934014 (diff) | |
qcacld-2.0: Fix buffer overflow in wma radio_tx_power_level_stats handler
In function wma_unified_radio_tx_power_level_stats_event_handler,
power_level_offset is received from the FW and is used to memcpy data
from FW to local tx_time_per_power_level for num_tx_power_levels length.
However tx_time_per_power_level is allocated only for
total_num_tx_power_levels length.
If the power_level_offset is greater than total_num_tx_power_levels, then
a buffer overwrite would occur.
Add sanity check to make sure power_level_offset does not exceed
total_num_tx_power_levels
Change-Id: Ia363512ee35bb0e30b137c20bf092238c2e356da
CRs-Fixed: 2162715
Diffstat (limited to 'tools/perf/scripts/python/netdev-times.py')
0 files changed, 0 insertions, 0 deletions