android_kernel_xiaomi_sm8350/core/dp/htt
Alok Kumar 3a7a4407d5 qcacld-3.0: Fix buffer overflow for HTT_T2H_MSG_TYPE_FLOW_POOL_MAP
Currently variable "num_flows" and "len" is used directly, from
message, without any validation which causes buffer over-write.

To address this issue add check for the num_flows and len

Change-Id: Iddf2df0fd65f5b33b54f1a608cdd34e400c0e03c
CRs-Fixed: 2148489
2018-02-07 04:52:48 -08:00
..
htt_fw_stats.c qcacld-3.0: Use qdf_dbg instead of qdf_print for non-error logs 2017-09-27 17:30:39 -07:00
htt_h2t.c qcacld-3.0: Add warning log for IPA session control critical code path 2017-10-26 21:49:24 -07:00
htt_internal.h qcacld-3.0: Reorganize the tx & rx member of skb->cb structure 2017-12-02 01:40:47 -08:00
htt_rx.c qcacld-3.0: Enable 64-bit htt rx addr tracking based on HTT_PADDR64 2018-01-08 14:26:06 -08:00
htt_t2h.c qcacld-3.0: Fix buffer overflow for HTT_T2H_MSG_TYPE_FLOW_POOL_MAP 2018-02-07 04:52:48 -08:00
htt_tx.c qcacld-3.0: Buffer count be power of 2 and unmap nbuf 2018-02-03 05:32:33 -08:00
htt_types.h qcacld-3.0: Add net buff pop fail counter 2017-10-03 07:46:18 -07:00
htt.c qcacld-3.0: Optimize driver init time log from HIF layer 2018-01-22 21:24:21 -08:00
rx_desc.h