android_kernel_xiaomi_sm8350/core
Vignesh Viswanathan 30e69280c7 qcacld-3.0: Fix potential infinite loop in get_container_ies_len
In the function get_container_ies_len, len (uint32) is calculated
from the length of the buffer parsed. Then it is copied to the uint8
pnConsumed pointer from the calling function. This could lead to
pnConsumed becoming 0 if len exceeds 255 and would cause infinte
loop in the function unpack_core.

Add changes to make pnConsumed passed from unpack_core to be uint32
so that there are no issues in get_container_ies_len

Change-Id: Ia5770b4becf7dd1cf7cb97ec2e0d94f3c5f4ed54
CRs-Fixed: 2101200
2017-10-12 13:58:37 -07:00
..
bmi qcacld-3.0: add ini config for PTP options 2017-10-12 13:57:17 -07:00
cds qcacld-3.0: add ini config for PTP options 2017-10-12 13:57:17 -07:00
dp qcacld-3.0: Cleanup ununsed typedef in datapath 2017-10-12 13:58:22 -07:00
hdd qcacld-3.0: Flush the delayed acs work during adapter deinit 2017-10-12 13:58:17 -07:00
mac qcacld-3.0: Fix potential infinite loop in get_container_ies_len 2017-10-12 13:58:37 -07:00
pld qcacld-3.0: Enable SDIO based WLAN self-recovery 2017-09-29 05:40:09 -07:00
sap qcacld-3.0: Remove unnecessary assertion in SAP callback 2017-10-09 03:47:57 -07:00
sme qcacld-3.0: Force SCC changes in non DBS mode 2017-10-12 13:58:08 -07:00
wma qcacld-3.0: Resolve double free during cleanup of vdev request 2017-10-12 13:58:31 -07:00