diff options
| author | Zhang Qian <zhangq@codeaurora.org> | 2018-04-23 14:06:15 +0800 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2018-04-22 23:27:31 -0700 |
| commit | f0457d293bc64c50691ad84ff9543e3ed66c7279 (patch) | |
| tree | e3590f71e675f2befc5a061d04fc71db3d3429a4 /lib/mpi/mpiutil.c | |
| parent | 8029539ffd5acd0d2cec2f05cae931181ebc958c (diff) | |
qcacld-2.0: Add sanity check for WMI event length
Some elements in a WMI message such as item number, buffer
length would lead to OOB read. UINT_MAX is used to check such
a case in wma_tbttoffset_update_event_handler() and
wma_unified_link_radio_stats_event_handler(). But UINT_MAX has
a huge number and WMA_SVC_MSG_SIZE is the correct choice.
CRs-Fixed: 2225935
Change-Id: If8ef37986e7b17861d2c9e29cbc5254743edbbe3
Diffstat (limited to 'lib/mpi/mpiutil.c')
0 files changed, 0 insertions, 0 deletions