Currently variable "num_flows" and "len" is used directly, from message, without any validation which causes buffer over-write. To address this issue add check for the num_flows and len Change-Id: Iddf2df0fd65f5b33b54f1a608cdd34e400c0e03c CRs-Fixed: 2148489 |
||
---|---|---|
.. | ||
htt_fw_stats.c | ||
htt_h2t.c | ||
htt_internal.h | ||
htt_rx.c | ||
htt_t2h.c | ||
htt_tx.c | ||
htt_types.h | ||
htt.c | ||
rx_desc.h |