diff options
| author | Pragaspathi Thilagaraj <tpragasp@codeaurora.org> | 2018-07-11 17:51:13 +0530 |
|---|---|---|
| committer | nshrivas <nshrivas@codeaurora.org> | 2018-07-12 05:54:55 -0700 |
| commit | 8f8783e9404dc938b0f837f3ae4fdfd1505390a7 (patch) | |
| tree | 12fde0d4dd0c63914ed6ea288c6d5269875f7fc5 /tools/perf/scripts/python | |
| parent | 0dd473caeeab4963f1667ae1c66c284732e15665 (diff) | |
qcacld-3.0: Fix possible buffer overflow in sir_convert_addts_rsp2_struct
In the function sir_convert_addts_rsp2_struct, iterator j is
assigned with the value pAddTs->numTclas + addts.num_WMMTCLAS.
The j value is used as the index to the array pAddTs->tclasInfo.
Maximum limit on pAddTs->tclasInfo entries is 2. So when the
value of j exceeds 2, then a possible buffer overflow could
occur.
Validate the value of j against SIR_MAC_TCLASIE_MAXNUM(2).
Change-Id: Icc723380ed4ccd51c729194d509e288be0e0712c
CRs-Fixed: 2264429
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions