diff options
| author | lifeng <lifeng@codeaurora.org> | 2018-08-01 18:57:23 +0800 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2018-08-06 23:29:03 -0700 |
| commit | 113cbda6d518bf4466184907cca82b0a18b0eeba (patch) | |
| tree | 3aebdff4d578c9913833780d940b905be7e165e9 /tools/perf/scripts/python | |
| parent | 1964a99d67168cef1544e05a5c123ff792796b82 (diff) | |
qcacld-2.0: Possible buffer overflow in wma_nan_rsp_event_handler
propagation from qcacld-3.0 to qcacld-2.0
Check for nan rsp data len does not take TLV header
size into account which could lead to buffer overflow
when copying data where TLV header size is taken into
account.
Fix is to subtract TLV header size and wmi_nan_event_hdr
size from max allowed size when validating nan rsp data
length.
Change-Id: I341779a33ed218fdda5d008e949ced0c8cf05590
CRs-Fixed: 2289026
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions