diff options
| author | Abhinav Kumar <abhikuma@codeaurora.org> | 2019-02-03 14:24:41 +0530 |
|---|---|---|
| committer | nshrivas <nshrivas@codeaurora.org> | 2019-02-13 14:47:57 -0800 |
| commit | 77a0912271cea9782fdba59ebd0ecd8739292509 (patch) | |
| tree | 864436dc4fe9fffda2cafbcfb38ba4e976eef05c /tools/perf/scripts/python | |
| parent | 44ec83ea00020d9a0383b99cbcaf48187dfa8a89 (diff) | |
qcacld-3.0: Fix OOB access in sme_ese_send_beacon_req_scan_results
After receiving the scan results per channel,
sme_ese_send_beacon_req_scan_results prepares beacon report
response info for each BSS in cur_result list. While parsing
cur_result list driver blindly checks bss_counter against
SIR_BCN_REPORT_MAX_BSS_DESC(4) to reach max/last BSS in cur_result
list this results out of bound error. Bound check for bss_counter
should be against the number of bss found in scan results per
channel to avoid OOB issue.
Validate the value of bss_counter against the number of bss found
in scan results.
Change-Id: I70152c4f62c6fcff755f13f3851c9683bdc2231c
CRs-Fixed: 2387198
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions