diff options
| author | Abhinav Kumar <abhikuma@codeaurora.org> | 2017-12-21 16:27:03 +0530 |
|---|---|---|
| committer | snandini <snandini@codeaurora.org> | 2018-01-17 04:06:21 -0800 |
| commit | 29ac431ca4acbca9f3fbe40b5791c83a7c87f7a1 (patch) | |
| tree | 4363765e7216ff011270e464eaabc014795b5116 /tools/perf/scripts | |
| parent | 5dfa87a820a385c7b9aeb8241c32202ba67ec72f (diff) | |
qcacld-2.0: Fix buffer overwrite due to ssid_len in WMA handlers
In multiple WMA event handler functions, ssid_len is used to copy
ssid from FW buffer to local buffer and ssid_len value is received
from the FW. If the ssid_len value exceeds SIR_MAC_MAX_SSID_LENGTH
then a buffer overwrite would occur.
Add sanity check for ssid_len against SIR_MAC_MAX_SSID_LENGTH in
multiple WMA handler functions
Change-Id: I9e4b1f88c275093b4912496cdb936cf54a8880a2
CRs-Fixed: 2162678
Diffstat (limited to 'tools/perf/scripts')
0 files changed, 0 insertions, 0 deletions