android_kernel_xiaomi_sm8350/core
Jeff Johnson 56951330f8 qcacld-3.0: Avoid buffer overflow during extscan bucket fill
This is a qcacld-2.0 to qcacld-3.0 propagation.

Function hdd_extscan_start_fill_bucket_channel_spec() is used to
transfer EXTSCAN bucket parameters from a netlink message to an
internal representation.  A code analysis tool identified a potential
buffer overflow of the per-bucket channel list in this function.  In
reality this is a false positive since there is other logic which
limits the total number of channels across all buckets, and this logic
will prevent overflow of the channel list for a single bucket since
they use the same limit.

However this presents a code maintenance issue since a potential
overflow could be introduced in the future if a change is made to
allow the total number of channels across all buckets to exceed the
number of channels allowed in a single bucket.

To protect against this possibility, as well as make the code analysis
tool happy, add an additional check to make sure the per-bucket
channel list does not overflow.

Change-Id: Ifdf2de918d8b2c5a907e833e7bc42315b607e5a5
CRs-Fixed: 922047
2015-11-23 13:09:02 -08:00
..
bmi qcacld-3.0: Initial snapshot of ihelium wlan driver 2015-11-17 17:52:53 -08:00
cdf qcacld-3.0: debug info for full reorder offload 2015-11-23 13:08:11 -08:00
cds qcacld-3.0: Avoid PMKID and send correct MIC for CCKM+RSN scenario 2015-11-23 13:09:01 -08:00
dp qcacld-3.0: Free rx_buff_list in htt_detach 2015-11-23 13:08:11 -08:00
hdd qcacld-3.0: Avoid buffer overflow during extscan bucket fill 2015-11-23 13:09:02 -08:00
hif qcacld-3.0: Initial snapshot of ihelium wlan driver 2015-11-17 17:52:53 -08:00
htc qcacld-3.0: Initial snapshot of ihelium wlan driver 2015-11-17 17:52:53 -08:00
mac qcacld-3.0: Cleanup logging 2015-11-23 13:09:01 -08:00
sap qcacld-3.0: Properly update specturum channel list 2015-11-23 13:08:11 -08:00
sme qcacld-3.0: Increase the Wait for key timer value 2015-11-23 13:09:01 -08:00
utils qcacld-3.0: Initial snapshot of ihelium wlan driver 2015-11-17 17:52:53 -08:00
wma qcacld-3.0: Fix race condition between WMI control RX and driver unload 2015-11-23 13:08:10 -08:00
wmi qcacld-3.0: Initial snapshot of ihelium wlan driver 2015-11-17 17:52:53 -08:00