소스 검색

qcacmn: Fix memory access out of bounds when sort 6g channel list

In arch 32 platform, the size of rnr_chan_info is 8 bytes, and it only
allocates 4 bytes for each of them. Which cause memory access out of
bounds.

Change-Id: I4f1798c5354c6a76e32bdfed13ade9667465b789
CRs-Fixed: 2827289
Wu Gao 4 년 전
부모
커밋
2f09a8e245
1개의 변경된 파일1개의 추가작업 그리고 1개의 파일을 삭제
  1. 1 1
      umac/scan/core/src/wlan_scan_manager_6ghz.c

+ 1 - 1
umac/scan/core/src/wlan_scan_manager_6ghz.c

@@ -75,7 +75,7 @@ scm_sort_6ghz_channel_list(struct wlan_objmgr_vdev *vdev,
 	if (tmp_list_count <= 1)
 		return;
 
-	rnr_chan_info = qdf_mem_malloc(sizeof(rnr_chan_info) * tmp_list_count);
+	rnr_chan_info = qdf_mem_malloc(sizeof(*rnr_chan_info) * tmp_list_count);
 	if (!rnr_chan_info)
 		return;