diff options
| author | Vignesh Viswanathan <viswanat@codeaurora.org> | 2017-10-30 18:09:15 +0530 |
|---|---|---|
| committer | snandini <snandini@codeaurora.org> | 2017-11-01 06:39:03 -0700 |
| commit | 5bb4f00cb3f9f321e46da051ad3b6ffc41c0f6a1 (patch) | |
| tree | 4c99e09366021294a8a8813c3ab4586badb23fbf /uapi/linux | |
| parent | 6daf6e15ce6044fcaeb532904dffb896020b33e0 (diff) | |
qcacld-3.0: Fix buffer overwrite in wma_unified_debug_print_event_handler
In function wma_unified_debug_print_event_handler, datalen is
received from the FW and is used to mem copy data buffer from
FW into the local array dbgbuf. Since dbgbuf is a local array
of size 500 bytes, if datalen is greater than 500, buffer
overwrite occurs during memcpy.
Add sanity check to limit datalen to 500 bytes if value received
is greater than 500 bytes.
Change-Id: Id63b5106bc7a3d3836d17ae47d019bc8a71c928e
CRs-Fixed: 2134801
Diffstat (limited to 'uapi/linux')
0 files changed, 0 insertions, 0 deletions