In the API wma_process_pdev_hw_mode_trans_ind the host doesnt check the upper limit of num_vdev_mac_entries received from the firmware, and fills the same to the host structure hw_mode_trans_ind, which may cause OOB write. Fix is to check for the max vdev supported in the same API and return if the condition is false. Change-Id: I54a9e12f777b87b49057d6c97c06ab71b9ad1d77 CRs-Fixed: 2221965 |
||
---|---|---|
.. | ||
bmi | ||
cds | ||
dp | ||
hdd | ||
mac | ||
pld | ||
sap | ||
sme | ||
wma |