samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

qcacmn: Check to validate wmi tartget_type

Browse Source 
This target type is used as an array index for wmi_attach_register.
If the index is greater than or equal to  WMI_MAX_TARGET_TYPE,
it may lead to invalid memory access.
KW issue id is 294041

Change-Id: Ibb49d77413517173c24aae44ae5a3f17069425d2
This commit is contained in:
Abhiram Jogadenu
2018-05-14 17:13:28 +05:30
committed by Gerrit - the friendly Code Review server
parent 3619e6668f
commit 429ab53de2
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
wmi_unified.c
View File

@@ -2193,6 +2193,10 @@ void *wmi_unified_attach(void *scn_handle,
param->rx_ops->wma_process_fw_event_handler_cbk; param->rx_ops->wma_process_fw_event_handler_cbk;
wmi_handle->target_type = param->target_type; wmi_handle->target_type = param->target_type;
soc->target_type = param->target_type; soc->target_type = param->target_type;
if (param->target_type >= WMI_MAX_TARGET_TYPE)
goto error;
if (wmi_attach_register[param->target_type]) { if (wmi_attach_register[param->target_type]) {
wmi_attach_register[param->target_type](wmi_handle); wmi_attach_register[param->target_type](wmi_handle);
} else { } else {