diff options
| author | Zhang Qian <zhangq@codeaurora.org> | 2018-01-25 19:11:29 +0800 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2018-02-13 01:34:54 -0800 |
| commit | fb50fd2b19c365439018cdf0a9dfd80031043488 (patch) | |
| tree | 14e44c6306c70d7428f68746fdc448ce44aabd4f /tools/perf/scripts | |
| parent | b8b4ff959edf7d9bea5f685ef09bb92749c90d55 (diff) | |
qcacld-2.0: Add sanity check for wmi TLV length
Add sanity check for wmi TLV header length before padding/shrinking
elements in a wmi which has a variable length for its TLV structure.
Currently, the TLV length is not checked so its maximum value could
be 65535 which results in a hugh count for elements. Number of elements
is used to terminate the loop for padding/shrinking. If the number
was too large, there would be memory overflow.
CRs-Fixed: 2169157
Change-Id: I99c700d62f8c0db84cbd95fc6efcb5249b89eb1d
Diffstat (limited to 'tools/perf/scripts')
0 files changed, 0 insertions, 0 deletions