diff options
| author | Vignesh Viswanathan <viswanat@codeaurora.org> | 2017-11-29 14:19:13 +0530 |
|---|---|---|
| committer | Oleg Matcovschi <omatcovschi@google.com> | 2018-03-15 15:24:47 -0700 |
| commit | c2bea8d4a45aa2301aefb398c0e786ea992561e5 (patch) | |
| tree | 67093216aff317bbf5c73cdcacb2e33b45b5f83d /net/unix/sysctl_net_unix.c | |
| parent | cb97628615cbe4058524e4360e45d6865e5854c9 (diff) | |
qcacld-3.0: Fix buffer overread in wma_extscan_cached_results_event_handler
In function wma_extscan_cached_results_event_handler,
event->num_entries_in_page is received from the FW and is used in the
function wma_extscan_find_unique_scan_ids to calculate scan_ids_cnt
from src_rssi buffer. If the value of num_entries_in_page is greater
than the number of src_rssi buffers present, a buffer overread would
occur in the function wma_extscan_find_unique_scan_ids.
There is already a check in place to valudate num_entries_in_page in
the function wma_extscan_cached_results_event_handler however it is done
after the call of wma_extscan_find_unique_scan_ids.
Move the checks on num_entries_in_page before using it in the function
wma_extscan_cached_results_event_handler
Bug: 72957564
Change-Id: Ib5e803589deb6ca074cb70326b9ce846d0754a73
CRs-Fixed: 2149720
Signed-off-by: Ecco Park <eccopark@google.com>
Diffstat (limited to 'net/unix/sysctl_net_unix.c')
0 files changed, 0 insertions, 0 deletions