diff options
| author | Debasis Das <ddas@codeaurora.org> | 2018-04-04 17:17:55 +0530 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2021-01-06 01:17:04 -0800 |
| commit | 3513ddb9467959d6dcf63830821fe3aa193da1c3 (patch) | |
| tree | a6ad4e1546c3a5335e5fce2563ab7c3f41565c2a /lib/string.c | |
| parent | 6d0a7569581368017c118fc3b7cebfee2dc37bd0 (diff) | |
qcacmn: Fix Integer Overflow Leading to Buffer Overflow
wmi_buf_alloc() API expects length to be passed of type
uint16_t. However, the callers pass uint32_t to it.
This might result in overflow and illegal memory access
thereafter. The fix is to modify the API signature accordingly.
Change-Id: If09da4978d421269b884f7d3c933c49c81651475
CRs-Fixed: 2218346
Diffstat (limited to 'lib/string.c')
0 files changed, 0 insertions, 0 deletions