The routine wma_extscan_change_results_event_handler sends the ext scan results to upper layers. This contains the bssid info, rssi values of different APs that are scanner. If the num_rssi_samples is negative or greater than UINT32_MAX,then an OOB write could happen. Add check to ensure rssi_num is not negative or exceeds UINT32_MAX. Also make sure the numap value is not negative. Change-Id: If82c4fd1193c45d38bd4495c187a406deb25acad CRs-Fixed: 2205957 |
||
---|---|---|
.. | ||
inc | ||
src |