diff options
| author | Vignesh Viswanathan <viswanat@codeaurora.org> | 2017-10-04 20:10:27 +0530 |
|---|---|---|
| committer | snandini <snandini@codeaurora.org> | 2017-10-06 14:15:49 -0700 |
| commit | 005a5e220168efb0c974d906ab90c2b8eae5406c (patch) | |
| tree | 2a66177420d2f543772a035669b3e39b6b4177de /uapi/linux | |
| parent | 5bb80a6b110477965a69f1ec737246d6fe80d3b0 (diff) | |
qcacld-3.0: Add check for if_id in wma_tbttoffset_update_event_handler
Currently if_id used in the for loop is incremented based on vdev_map != 0
and vdev_map is a uint_32, received from FW, and is right shifted by one bit
for each iteration. This could result in if_id going upto max of 31 and cause
OOB read.
Add sanity check to make sure if_id is less than max_bssid.
Change-Id: I7e0c4e9a26cb67f41e35c60c2756d7ad02cf43ea
CRs-Fixed: 2119443
Diffstat (limited to 'uapi/linux')
0 files changed, 0 insertions, 0 deletions