lisa/android_kernel_xiaomi_sm8350
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
b688288e70
android_kernel_xiaomi_sm8350/core/hdd/inc
History
Abhishek Ambure 3d18b4c831 qcacld-3.0: Add max index check for dscp_to_up_map array 
In SME layer, boundary check for dscp_to_up_map array is not present.

The dscpmapping is an array of 0x40 elements. Values in dscp_exceptions
are used to index dscpmapping. The indices are not validated to be less
than 0x40. The dscp_exceptions array is received from association
response frame. A malicious AP can send values up to 0xff, causing OOB
write of dscpmapping array.

Hence, max index check is added to avoid OOB write of dscpmapping array.

Change-Id: I73526849677e867673fc0bd0024ed2b003e4f89e
CRs-Fixed: 2569764
2019-12-10 00:50:20 -08:00
..
hdd_config.h qcacld-3.0: Send RTT capability for STA mode 2019-12-03 13:10:29 -08:00
hdd_dp_cfg.h qcacld-3.0: Affine RX thread to big cluster during uplink 2019-12-05 18:05:10 -08:00
qc_sap_ioctl.h qcacld-3.0: Move sta_info from array based to hash based 2019-10-15 00:48:54 -07:00
wlan_hdd_apf.h qcacld-3.0: Remove WLAN_WAIT_TIME_APF_GET_CAPS 2019-01-07 08:46:41 -08:00
wlan_hdd_assoc.h qcacld-3.0: Fix failure of NDP peer save 2019-11-15 21:00:09 -08:00
wlan_hdd_bcn_recv.h qcacld-3.0: Handle BEACON_REPORTING_DO_NOT_RESUME vendor attribute 2019-06-18 07:51:15 -07:00
wlan_hdd_cfg.h qcacld-3.0: Affine RX thread to big cluster during uplink 2019-12-05 18:05:10 -08:00
wlan_hdd_conc_ut.h
wlan_hdd_data_stall_detection.h
wlan_hdd_debugfs_coex.h qcacld-3.0: Add support to improve coex logging 2019-03-29 00:47:53 -07:00
wlan_hdd_debugfs_csr.h qcacld-3.0: Fix markings 2019-02-22 21:23:30 -08:00
wlan_hdd_debugfs_llstat.h
wlan_hdd_debugfs_mibstat.h qcacld-3.0: Add debugfs for MIB statistics 2019-12-01 17:39:59 -08:00
wlan_hdd_debugfs.h
wlan_hdd_driver_ops.h qcacld-3.0: Enable Force wake 2019-11-26 02:13:59 -08:00
wlan_hdd_ether.h
wlan_hdd_ftm.h
wlan_hdd_fw_state.h qcacld-3.0: Support firmware state check through cfg80211 vendor cmd 2019-03-01 09:23:49 -08:00
wlan_hdd_he.h qcacld-3.0: Cleanup He cap INI items 2019-01-14 17:32:29 -08:00
wlan_hdd_host_offload.h qcacld-3.0: Replace multiple IPv4/v6 address len macros with QDF macro 2019-04-16 19:57:47 -07:00
wlan_hdd_includes.h
wlan_hdd_ipa.h qcacld-3.0: abstract Linux identifiers from IPA component 2019-05-31 02:29:49 -07:00
wlan_hdd_lro.h qcacld-3.0: Remove obsolete hdd_lro_init() stub 2018-12-06 23:09:57 -08:00
wlan_hdd_main.h qcacld-3.0: Add max index check for dscp_to_up_map array 2019-12-10 00:50:20 -08:00
wlan_hdd_misc.h qcacld-3.0: add build flag DYNAMIC_SINGLE_CHIP 2019-04-30 22:27:24 -07:00
wlan_hdd_mpta_helper.h qcacld-3.0: Add MPTA helper support 2019-03-15 07:46:59 -07:00
wlan_hdd_nan.h qcacld-3.0: Remove unused wlan_hdd_cfg80211_nan_*() stubs 2019-03-07 22:22:42 -08:00
wlan_hdd_napi.h
wlan_hdd_oemdata.h qcacld-3.0: Convert legacy chan ID usage to chan freq 2019-11-12 02:35:14 -08:00
wlan_hdd_p2p.h qcacld-3.0: Process rx_mgmt_pkt based on frequency 2019-10-18 02:55:17 -07:00
wlan_hdd_packet_filter_api.h qcacld-3.0: Use vdev_id in wlan_hdd_set_filter() 2019-02-27 09:55:42 -08:00
wlan_hdd_packet_filter_rules.h
wlan_hdd_power.h qcacld-3.0: Add driver command to request ANI level 2019-11-26 05:30:13 -08:00
wlan_hdd_regulatory.h qcacld-3.0: Update regulatory configs before use 2019-11-21 04:41:29 -08:00
wlan_hdd_softap_tx_rx.h qcacld-3.0: Peer ID cleanup in LIM, HDD and WMA 2019-12-06 01:51:09 -08:00
wlan_hdd_spectralscan.h qcacld-3.0: Register spectral to DBR in hdd_wlan_start_modules 2019-11-25 16:14:41 -08:00
wlan_hdd_sysfs.h qcacld-3.0: Add Host Driver support for Beacon reception stats 2018-12-11 12:27:05 -08:00
wlan_hdd_tdls.h qcacld-3.0: Cleanup sta_index in TDLS structures and APIs 2019-10-22 09:05:33 -07:00
wlan_hdd_trace.h
wlan_hdd_tsf.h qcacld-3.0: Add support for gpio based strobe to capture tsf 2019-08-21 00:06:01 -07:00
wlan_hdd_twt.h qcacld-3.0: Re-enable TWT before host TWT trigger mode 2019-10-09 16:16:43 -07:00
wlan_hdd_tx_rx.h qcacld-3.0: Add support to flush rx packets for a vdev 2019-11-01 00:17:18 -07:00
wlan_hdd_wext.h qcacld-3.0: Add support to configure HE SGI for SAP 2019-09-25 04:58:53 -07:00
wlan_hdd_wmm.h qcacld-3.0: Add max index check for dscp_to_up_map array 2019-12-10 00:50:20 -08:00
wlan_hdd_wowl.h