Kernel Tree For Xiaomi 11 Lite NE 5G
Go to file
Vignesh Viswanathan 04f8795b03 qcacld-3.0: Add sanity check for key_nai_length to prevent int underflow
In function csr_update_fils_params_rso, fils_info->key_nai_length
is used to calculate username_length and then subsequently to
calculate realm_len. If the value of key_nai_length received from
the framework is 0, the value of username_length would also be 0
thereby making realm_len as -1. However since realm_len is uint32,
the int value would underflow to a very large value leading to crash
at qdf_mem_copy.

Add sanity check to return if the value of key_nai_length is 0
or if the pointer to keyname_nai is NULL.

Change-Id: I9bfaa8f3be608bd90a0cd818be6627c9f12217c8
CRs-Fixed: 2141458
2017-11-12 11:26:48 -08:00
components qcacld-3.0: Use enum QDF_OPMODE 2017-11-10 00:27:42 -08:00
core qcacld-3.0: Add sanity check for key_nai_length to prevent int underflow 2017-11-12 11:26:48 -08:00
uapi/linux qcacld-3.0: Fix checkpatch warnings (QUOTED_WHITESPACE_BEFORE_NEWLINE) 2017-10-24 16:40:56 -07:00
Android.mk qcacld-3.0: Correct symbolic link for wlan.ko 2017-08-06 05:00:09 -07:00
Kbuild qcacld-3.0: Enable QDF cpu hotplug APIs 2017-11-07 13:42:37 -08:00
Kconfig qcacld-3.0: Add Kconfig option for feature flag 2017-10-18 07:49:26 -07:00
Makefile qcacld-3.0: accept module name externally 2016-06-01 10:48:46 -07:00
README.txt Initial readme for WLAN Host Driver for iHelium 2015-04-06 11:45:23 -07:00

This is CNSS WLAN Host Driver for products starting from iHelium