lisa/android_kernel_xiaomi_sm8350
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Kernel Tree For Xiaomi 11 Lite NE 5G
18,318 Commits 2 Branches 0 Tags 5.2 GiB
C 98.1%
Assembly 1.1%
Makefile 0.3%
Shell 0.2%
Python 0.1%
762ed1e51a
Go to file
Sourav Mohapatra 762ed1e51a qcacld-3.0: Prevent possible OOB access in hdd_sendactionframe 
In the function hdd_sendactionframe, the parameters passed include the
payload and the corresponding payload length; payload being generic
pointer. The payload is then typecasted into the destination structure
of type tpSirMacVendorSpecificFrameHdr. If the size of the payload
specified in payload_len is less than the size of the destination
structure, there is possiblility of OOB read while accessing the same.

To prevent this security vulnerability, add a sanity check for the
payload_len against the size of the destination structure.

Change-Id: Ib0e7b7bfcf78412d81f18cf887e5296d80272598
CRs-Fixed: 2517858
2020-01-31 05:36:36 -08:00
components qcacld-3.0: Add an ini for separate iface support for NAN 2020-01-31 00:57:02 -08:00
configs qcacld-3.0: Disable PM_QOS feature in WHUNT config 2020-01-29 06:01:15 -08:00
core qcacld-3.0: Prevent possible OOB access in hdd_sendactionframe 2020-01-31 05:36:36 -08:00
os_if qcacld-3.0: Selectively reduce the hdd/osif logs 2020-01-27 17:36:34 -08:00
uapi/linux qcacld-3.0: Add PKTLOG_TYPE_RX_STATBUF 2019-10-09 19:10:36 -07:00
Android.mk qcacld-3.0: Disable the module under QMAA 2019-09-18 19:02:04 -07:00
Kbuild qcacld-3.0: Provide soc objmgr to hif 2020-01-27 15:42:46 -08:00
Kconfig qcacld-3.0: Combine all NAN related flags with WLAN_FEATURE_NAN 2019-02-04 10:44:30 -08:00
Makefile
README.txt

README.txt 

This is CNSS WLAN Host Driver for products starting from iHelium