android_kernel_xiaomi_sm8350/core/wma
Harprit Chhabada 4480699f92 qcacld-3.0: Fix OOB in wma_stats_event_handler
In wma_stats_event_handler several fields lengths are added
together to check against param_buf->num_data (the overall
length of the buffer).
The problem is that num_pdev_stats, num_vdev_stats and
num_peer_stats represent the number of structures of each
type rather than the total number of bytes.
Therefore update the logic to compare the expected size of
the entire payload to the actual payload.

Change-Id: I94af679480e62a61d4b25a1f370b2f199985f874
CRs-Fixed: 2429010
2019-05-02 23:39:30 -07:00
..
inc qcacld-3.0: Use peer to get the cipher to decide MIC length 2019-05-01 23:41:43 -07:00
src qcacld-3.0: Fix OOB in wma_stats_event_handler 2019-05-02 23:39:30 -07:00