lisa/android_kernel_xiaomi_sm8350
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

qcacld-3.0: Check vdev_id against wma->max_bssid

Browse Source 
Check vdev_id against wma->max_bssid in wma_mcc_vdev_tx_pause_evt_handler to
avoid bufer overflow.

Change-Id: Ie47a0ed2f7f27f13a01e1b2cb365fae66b41b1df
CRs-Fixed: 2120677
This commit is contained in:
Naveen Rawat 2017-10-03 16:58:25 -07:00 committed by snandini
parent 05512b452b
commit 60f39da929
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
core/wma/src/wma_data.c
View File

@ -1641,7 +1641,8 @@ int wma_mcc_vdev_tx_pause_evt_handler(void *handle, uint8_t *event,
* vdev_map = (1 << vdev_id)
* So, host should unmap to ID
*/
for (vdev_id = 0; vdev_map != 0; vdev_id++) {
for (vdev_id = 0; vdev_map != 0 && vdev_id < wma->max_bssid;
vdev_id++) {
if (!(vdev_map & 0x1)) {
/* No Vdev */
} else {