lisa/android_kernel_xiaomi_sm8350
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Kernel Tree For Xiaomi 11 Lite NE 5G
8,957 Commits 2 Branches 0 Tags 5.2 GiB
C 98.1%
Assembly 1.1%
Makefile 0.3%
Shell 0.2%
Python 0.1%
59f0fad8fe
Go to file
Vignesh Viswanathan 59f0fad8fe qcacld-3.0: Fix OOB write in WMA TX power level stats handler 
In function wma_unified_radio_tx_power_level_stats_event_handler, radio_id
is received from the FW in the fixed_param strcutre and is used to access
the buffer wma_handle->link_stats_results which is allocated in
wma_unified_link_radio_stats_event_handler. The buffer is allocated for
link_stats_results->num_radio and if the radio_id received from the
FW is greater than link_stats_results->num_radio, an OOB write will
occur in wma_unified_radio_tx_power_level_stats_event_handler.

Add check to return failure if radio_id received from the FW is greater
than link_stats_results->num_radio.

Change-Id: I67a848e7ab137d46bb43e7336ff8135da257568c
CRs-Fixed: 2169104
2018-01-30 14:40:55 -08:00
components qcacld-3.0: Add UCFG APIs and public structures for OCB 2018-01-29 23:40:32 -08:00
core qcacld-3.0: Fix OOB write in WMA TX power level stats handler 2018-01-30 14:40:55 -08:00
uapi/linux qcacld-3.0: Enable Packetlog for Napier 2017-12-09 23:27:07 -08:00
Android.mk qcacld-3.0: Correct symbolic link for wlan.ko 2017-08-06 05:00:09 -07:00
Kbuild qcacld-3.0: Add UCFG APIs and public structures for OCB 2018-01-29 23:40:32 -08:00
Kconfig qcacld-3.0: Remove FW memory dump feature 2017-12-28 11:54:10 +05:30
Makefile qcacld-3.0: accept module name externally 2016-06-01 10:48:46 -07:00
README.txt

README.txt 

This is CNSS WLAN Host Driver for products starting from iHelium