qcacld-3.0: Use right copy length for struct hecap_6ghz to avoid OOB
In function wlan_cfg80211_tdls_extract_6ghz_params(), the length of req_info->he_6ghz_cap is two bytes, but with a copy length of the length of pointer params->he_6ghz_capa. Make sure the righ copy length is used here to avoid OOB. Change-Id: I8e98c2a72ab032c3da9e0e213d1ea85f0653e0cb CRs-Fixed: 3047149
Этот коммит содержится в:

коммит произвёл
Madan Koyyalamudi

родитель
aff7861235
Коммит
070ac60087
@@ -249,7 +249,7 @@ wlan_cfg80211_tdls_extract_6ghz_params(struct tdls_update_peer_params *req_info,
|
||||
}
|
||||
|
||||
qdf_mem_copy(&req_info->he_6ghz_cap, params->he_6ghz_capa,
|
||||
sizeof(params->he_6ghz_capa));
|
||||
sizeof(req_info->he_6ghz_cap));
|
||||
}
|
||||
#else
|
||||
static void
|
||||
|
Ссылка в новой задаче
Block a user