Kernel Tree For Xiaomi 11 Lite NE 5G
Go to file
Rakshith Suresh Patkar 9051736a2e qcacld-3.0: Fix possible overflow in wma_stats_event_handler
The excess buffer check in wma_stats_event_handler is such that
if buflen is greater than WMI_SVC_MSG_MAX_SIZE, the resulting
difference of the two values will be a negative integer, which
will be treated as a very large positive integer since the data type
is unsigned. This will result in the check failing to detect overflow
when compared with sizeof(*event).

Fix the buflen check condition such that buflen is compared with the
difference of WMI_SVC_MSG_MAX_SIZE and sizeof(*event), eliminating
the possibility of overflow.

Change-Id: Ic20bfa554476db36e28557402cec23fcce5af85d
CRs-Fixed: 2224443
2018-06-07 02:30:36 -07:00
components qcacld-3.0: clean up to avoid NULL pointer dereference IPA 2018-06-04 15:03:48 -07:00
configs qcacld-3.0: Featurize packet log 2018-06-06 23:49:08 -07:00
core qcacld-3.0: Fix possible overflow in wma_stats_event_handler 2018-06-07 02:30:36 -07:00
uapi/linux qcacld-3.0: Featurize packet log 2018-06-06 23:49:08 -07:00
Android.mk
Kbuild qcacld-3.0: Featurize packet log 2018-06-06 23:49:08 -07:00
Kconfig qcacld-3.0: Remove obsolete CONFIG_PRIMA_WLAN_11AC_HIGH_TP 2018-04-11 03:37:50 -07:00
Makefile qcacld-3.0: Allow out-of-tree build with relative path in M 2018-02-09 11:33:09 -08:00
README.txt

This is CNSS WLAN Host Driver for products starting from iHelium