android_kernel_xiaomi_sm8350/core
Pragaspathi Thilagaraj 2628343597 qcacld-3.0: Fix possible buffer overread in wma_set_epno_network_list
In the function wma_set_epno_network_list,
req->networks[i].ssid.ssId is copied into the destination
params->networks[i].ssid.mac_ssid. But the ssid length is not
considered while copying and WMI_MAC_MAX_SSID_LENGTH is used as
the length for copying. This might result in possible buffer
overread if the ssid length is not WMI_MAC_MAX_SSID_LENGTH.
Similar issue is seen in wma_pno_start also.

Use pno->aNetworks[i].ssId.length as the size to mem copy the
ssid to the destination ssid buffer.

Change-Id: Id3f579da97e398663b7d583f5f46d4671eabeae3
CRs-Fixed: 2233682
2018-05-04 20:43:00 -07:00
..
bmi qcacld-3.0: bmi: Remove legacy markings 2018-04-24 14:48:51 -07:00
cds qcacld-3.0: Log reason code while flushing logging events 2018-05-03 08:04:57 -07:00
dp qcacld-3.0: Add GRO support to NAPI+Rx_thread processing model 2018-05-04 20:42:58 -07:00
hdd qcacld-3.0: Add GRO support to NAPI+Rx_thread processing model 2018-05-04 20:42:58 -07:00
mac Release 5.2.0.76M 2018-05-04 07:30:51 -07:00
pld qcacld-3.0: pld: Remove legacy markings 2018-04-24 14:48:41 -07:00
sap qcacld-3.0: Fix null pointer dereference in SAP state fsm 2018-05-03 18:33:03 -07:00
sme qcacld-3.0: Add validation check for Access category 2018-05-04 20:42:55 -07:00
wma qcacld-3.0: Fix possible buffer overread in wma_set_epno_network_list 2018-05-04 20:43:00 -07:00