android_kernel_xiaomi_sm8350/core
Pragaspathi Thilagaraj 1e5420a974 qcacld-3.0: Fix OOB read in iw_hdd_set_var_ints_getnone
From the IOCTL command WE_POLICY_MANAGER_PCL_CMD, we get the cds
concurrency mode as argument and pass it to cds_get_pcl to get
the pcl channel list. This concurrency mode parameter is used as
the array index to retrive the enum cds_pcl_type. If this value
is greater than CDS_MAX_NUM_OF_MODE an OOB read will occur in
iw_hdd_set_var_ints_getnone.

Add check to validate the input cds mode argument against the macro
CDS_MAX_NUM_OF_MODE. Return error if it is violated.

Change-Id: Iaa79d9698e0074a31a9c3f2396bd06d436d1e349
CRs-Fixed: 2216048
2018-05-18 02:16:55 -07:00
..
bmi qcacld-3.0: bmi: Fix misspellings 2018-05-16 18:01:27 -07:00
cds qcacld-3.0: cds: Fix misspellings 2018-05-16 18:01:33 -07:00
dp qcacld-3.0: Possible Out Of Bound reads in htt_t2h_tx_ppdu_log_print() 2018-05-17 07:59:21 -07:00
hdd qcacld-3.0: Fix OOB read in iw_hdd_set_var_ints_getnone 2018-05-18 02:16:55 -07:00
mac Release 5.2.0.78Z 2018-05-18 00:00:19 -07:00
pld qcacld-3.0: pld: Fix misspelling of 'bandwidth' 2018-05-16 18:01:49 -07:00
sap qcacld-3.0: sap: Fix misspellings 2018-05-18 00:00:18 -07:00
sme qcacld-3.0: Fix the issue with LDPC disable 2018-05-17 11:34:42 -07:00
wma qcacld-3.0: Fix potential risk of AMSDU config 2018-05-17 21:39:00 -07:00