android_kernel_xiaomi_sm8350/core
Harprit Chhabada 4480699f92 qcacld-3.0: Fix OOB in wma_stats_event_handler
In wma_stats_event_handler several fields lengths are added
together to check against param_buf->num_data (the overall
length of the buffer).
The problem is that num_pdev_stats, num_vdev_stats and
num_peer_stats represent the number of structures of each
type rather than the total number of bytes.
Therefore update the logic to compare the expected size of
the entire payload to the actual payload.

Change-Id: I94af679480e62a61d4b25a1f370b2f199985f874
CRs-Fixed: 2429010
2019-05-02 23:39:30 -07:00
..
bmi qcacld-3.0: bmi: Replace explicit comparison to NULL 2019-03-19 22:54:28 -07:00
cds qcacld-3.0: Remove file cds_if_upperproto.h 2019-04-30 22:27:20 -07:00
dp qcacld-3.0: Remove file cds_if_upperproto.h 2019-04-30 22:27:20 -07:00
hdd qcacld-3.0: Add rx rate info in connect_info debugfs 2019-05-02 03:09:04 -07:00
mac Release 5.2.0.132I 2019-05-02 21:37:18 -07:00
pld qcacld-3.0: add build flag DYNAMIC_SINGLE_CHIP 2019-04-30 22:27:24 -07:00
sap qcacld-3.0: Add support to cache peer rssi and mc_bc count 2019-05-01 10:18:15 -07:00
sme qcacld-3.0: Add adaptive 11r VSIE changes and akm filter changes 2019-05-02 08:15:54 -07:00
wma qcacld-3.0: Fix OOB in wma_stats_event_handler 2019-05-02 23:39:30 -07:00