diff options
| author | Bala Venkatesh <bjavvaji@codeaurora.org> | 2018-02-19 15:31:00 +0530 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2018-03-19 05:00:49 -0700 |
| commit | 0bdb5f0fbc106c11e822463fb1ee99d0a149ea93 (patch) | |
| tree | af7b03b13769c94c6135c9f5ae9cf9bee36e6cc9 /tools/perf/scripts/python/syscall-counts.py | |
| parent | d340bb85e1664db5d101ec5b0ed80ca6a1838eb2 (diff) | |
qcacld-2.0: Fix UAF in the function wlan_hdd_execute_remain_on_channel
In function wlan_hdd_execute_remain_on_channel after calling
sme_remain_on_channel Buffer pointed by "pRemainChanCtx" may be freed
in other thread "wlan_hdd_remain_on_channel_callback". UAF will happen
on when accessing "pRemainChanCtx->rem_on_chan_request".
Access pRemainChanCtx only when it is not NULL.
Change-Id: I32696ca9d88bc55f7c9841c7d602f363c35ed49f
CRs-Fixed: 2189054
Diffstat (limited to 'tools/perf/scripts/python/syscall-counts.py')
0 files changed, 0 insertions, 0 deletions