Vignesh Viswanathan 08ad8a0a34 qcacld-3.0: Add vdev_id sanity check in wma_vdev_stop_resp_handler ... In function wma_vdev_stop_resp_handler, resp_event->vdev_id is received from the FW and is used to access the interfaces array in wma_handle. This could lead to OOB read/write if the vdev_id received from the FW is greater than or equal to max_bssid. Add check to return failure if resp_event->vdev_id is greater than or equal to max_bssid in wma_vdev_stop_resp_handler Change-Id: I1af5312e6c45db3b9ba03fbf45de3d3c2a7fab20 CRs-Fixed: 2185477		2018-02-21 15:24:18 -08:00
..
inc	qcacld-3.0: Scan cleanup in lim and csr	2018-02-14 04:02:17 -08:00
src	qcacld-3.0: Add vdev_id sanity check in wma_vdev_stop_resp_handler	2018-02-21 15:24:18 -08:00