diff options
| author | Pragaspathi Thilagaraj <tpragasp@codeaurora.org> | 2018-04-24 14:13:13 +0530 |
|---|---|---|
| committer | nshrivas <nshrivas@codeaurora.org> | 2018-05-15 10:23:32 -0700 |
| commit | 237c540f8a67e3fdb539bba321713868a2e38ba2 (patch) | |
| tree | 498c333d4d752c50a320b2e0028bf7c9482bc507 /tools | |
| parent | c7ca4d454e3e415a3324431255592b11e11ff5d7 (diff) | |
qcacld-3.0: Fix OOB read in iw_hdd_set_var_ints_getnone
From the IOCTL command WE_POLICY_MANAGER_PCL_CMD, we get the cds
concurrency mode as argument and pass it to cds_get_pcl to get
the pcl channel list. This concurrency mode parameter is used as
the array index to retrive the enum cds_pcl_type. If this value
is greater than CDS_MAX_NUM_OF_MODE an OOB read will occur in
iw_hdd_set_var_ints_getnone.
Add check to validate the input cds mode argument against the macro
CDS_MAX_NUM_OF_MODE. Return error if it is violated.
Change-Id: Iaa79d9698e0074a31a9c3f2396bd06d436d1e349
CRs-Fixed: 2216048
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions
