android_kernel_xiaomi_sm8350/core
Yeshwanth Sriram Guntuka f71b48e505 qcacld-3.0: Possible buffer overflow in wma_stats_ext_event_handler
Check for stats ext info data len does not take TLV header
size into account which could lead to buffer overflow
when copying data where TLV header size is taken into
account.

Fix is to subtract TLV header size and stats_ext_info
size from max allowed size when validating stats ext
info data length.

Change-Id: I34e35a0aab396af3d93a0f61e0ab6a2da09f22ab
CRs-Fixed: 2227263
2018-05-15 03:21:26 -07:00
..
bmi qcacld-3.0: bmi: Remove legacy markings 2018-04-24 14:48:51 -07:00
cds qcacld-3.0: Fix typo "diable" 2018-05-12 04:30:06 -07:00
dp qcacld-3.0: Fix Use-After-Free in ol_txrx_pdev_detach 2018-05-15 03:21:22 -07:00
hdd qcacld-3.0: Split __wlan_hdd_cfg80211_get_station for sta/sap 2018-05-15 00:36:12 -07:00
mac Release 5.2.0.77Y 2018-05-15 00:36:13 -07:00
pld qcacld-3.0: pld: Remove legacy markings 2018-04-24 14:48:41 -07:00
sap qcacld-3.0: Clear mac_ctx->sap.sapCtxList for SAP if SSR happen 2018-05-14 10:26:18 -07:00
sme qcacld-3.0: Acquire SME lock before csr_roam_offload_scan from SME 2018-05-14 20:15:42 -07:00
wma qcacld-3.0: Possible buffer overflow in wma_stats_ext_event_handler 2018-05-15 03:21:26 -07:00