qcacmn: fix out of bound access of memories in wlan_cfg80211_scan
In wlan_cfg80211_scan the number of ssid, ssid length and number of channels are not checked for max size of array and thus can lead to Out of bound access of memories. Fix is to add bound check before copying the params. Change-Id: Ie6d4e546fb9c884d5988493b611ef7b217f0a95c CRs-Fixed: 2375217
Esse commit está contido em:
@@ -1,5 +1,5 @@
|
||||
/*
|
||||
* Copyright (c) 2017-2018 The Linux Foundation. All rights reserved.
|
||||
* Copyright (c) 2017-2019 The Linux Foundation. All rights reserved.
|
||||
*
|
||||
* Permission to use, copy, modify, and/or distribute this software for
|
||||
* any purpose with or without fee is hereby granted, provided that the
|
||||
@@ -32,9 +32,9 @@
|
||||
typedef uint16_t wlan_scan_requester;
|
||||
typedef uint32_t wlan_scan_id;
|
||||
|
||||
#define WLAN_SCAN_MAX_NUM_SSID 10
|
||||
#define WLAN_SCAN_MAX_NUM_BSSID 10
|
||||
#define WLAN_SCAN_MAX_NUM_CHANNELS 40
|
||||
#define WLAN_SCAN_MAX_NUM_SSID 16
|
||||
#define WLAN_SCAN_MAX_NUM_BSSID 4
|
||||
#define WLAN_SCAN_MAX_NUM_CHANNELS 68
|
||||
|
||||
#define SCM_CANCEL_SCAN_WAIT_TIME 50
|
||||
#define SCM_CANCEL_SCAN_WAIT_ITERATION 600
|
||||
|
Referência em uma nova issue
Block a user