diff options
| author | tinlin <tinlin@codeaurora.org> | 2018-10-16 13:40:45 +0800 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2018-10-23 18:56:57 -0700 |
| commit | ca2722a14d1d8828a51e2592df3fa3f757af7290 (patch) | |
| tree | 3cef1a38b5a881c233a1afa7230fbd711c0eed75 /tools/perf/scripts/python/sctop.py | |
| parent | 3f9584578927d92e5a7aad76ff1f1449d575712c (diff) | |
qcacld-2.0: Fix possible OOB access in lim_process_assoc_req_frame
Propagation from cld3.0 driver to cld2.0 driver.
cfg_get_vendor_ie_ptr_from_oui is invoked in
limProcessAssocReqFrame function with ie
pointer pointing to frame buffer plus assoc
req ie offset and ie len equal to frame buffer
len. This could result in OOB access since
offset is not subtracted from frame len.
Fix is to subtract the offset from frame len
as argument to cfg_get_vendor_ie_ptr_from_oui.
Change-Id: Ic107867bcf4d7813c544309a2aff165f2dc7155d
CRs-Fixed: 2333887
Diffstat (limited to 'tools/perf/scripts/python/sctop.py')
0 files changed, 0 insertions, 0 deletions