diff options
| author | Abhinav Kumar <abhikuma@codeaurora.org> | 2017-10-26 15:15:26 +0530 |
|---|---|---|
| committer | snandini <snandini@codeaurora.org> | 2017-10-28 16:23:57 -0700 |
| commit | 358c609b9f7cfa7c49d2063eba4d778e4f484e37 (patch) | |
| tree | e6898e5d02af377b8eb05ac4df29f7b6714c4710 /uapi | |
| parent | 9e58ac92bab0975382dee6be19ede6daf8ac2aa4 (diff) | |
qcacld-3.0: Fix Out of Bound issue in dfs_phyerr_no_offload_event_handler
Currently, pe_hdr->buf_len received from FW and param_tlvs->num_bufp, have
fixed size, is used to copy data come from fW. If data buffer received from
FW is greater than size of param_tlvs->num_bufp, then out of bound
issue will occurs.
Add sanity check to make sure pe_hdr->buf_len is not greater than
param_tlvs->num_bufp.
Change-Id: I81ad75c041d04e7cb6b9d07dc73ca55b4276425d
CRs-Fixed: 2122826
Diffstat (limited to 'uapi')
0 files changed, 0 insertions, 0 deletions