Kernel Tree For Xiaomi 11 Lite NE 5G
In function csr_update_fils_params_rso, fils_info->key_nai_length is used to calculate username_length and then subsequently to calculate realm_len. If the value of key_nai_length received from the framework is 0, the value of username_length would also be 0 thereby making realm_len as -1. However since realm_len is uint32, the int value would underflow to a very large value leading to crash at qdf_mem_copy. Add sanity check to return if the value of key_nai_length is 0 or if the pointer to keyname_nai is NULL. Change-Id: I9bfaa8f3be608bd90a0cd818be6627c9f12217c8 CRs-Fixed: 2141458 |
||
---|---|---|
components | ||
core | ||
uapi/linux | ||
Android.mk | ||
Kbuild | ||
Kconfig | ||
Makefile | ||
README.txt |
This is CNSS WLAN Host Driver for products starting from iHelium