diff options
| author | Jingxiang Ge <jge@codeaurora.org> | 2017-09-22 15:12:37 +0800 |
|---|---|---|
| committer | snandini <snandini@codeaurora.org> | 2017-10-17 19:27:15 -0700 |
| commit | bea0b10053c8cf6a093c936f3ad50c2ca1b8711c (patch) | |
| tree | 2f99e568cd98600d34c48b3e87f2a0a54164c718 /uapi/linux | |
| parent | 64e4dd3d840494aa6b3794b2cd08befe2379cad0 (diff) | |
qcacld-3.0: Add buffer length check to avoid over-read
In wma_mgmt_rx_process, hdr->buf_len is read from message,
if hdr->buf_len is larger than data_len, it will over-read
from param_tlvs->bufp with corrupted message.
Change-Id: I7f06d81fd18960d0d6c57cdb4594680178022087
CRs-Fixed: 2126972
Diffstat (limited to 'uapi/linux')
0 files changed, 0 insertions, 0 deletions