Ver Fonte

qcacld-3.0: Buffer overflow in setrmcenable, setrmcactionperiod

There is a buffer overflow while using sscanf in setrmcenable
and setrmcactionperiod APIs.
To resolve this, use sscanf according to buffer length.

Change-Id: I91b0c36cb8c67d45afb0b95ac944f9e87187f85a
CRs-Fixed: 2086337
Ashish Kumar Dhanotiya há 7 anos atrás
pai
commit
9cd0d7c74f
1 ficheiros alterados com 2 adições e 2 exclusões
  1. 2 2
      core/hdd/src/wlan_hdd_ioctl.c

+ 2 - 2
core/hdd/src/wlan_hdd_ioctl.c

@@ -234,7 +234,7 @@ static int hdd_parse_setrmcenable_command(uint8_t *pValue,
 	if ('\0' == *inPtr)
 		return 0;
 
-	v = sscanf(inPtr, "%32s ", buf);
+	v = sscanf(inPtr, "%31s ", buf);
 	if (1 != v)
 		return -EINVAL;
 
@@ -272,7 +272,7 @@ static int hdd_parse_setrmcactionperiod_command(uint8_t *pValue,
 	if ('\0' == *inPtr)
 		return 0;
 
-	v = sscanf(inPtr, "%32s ", buf);
+	v = sscanf(inPtr, "%31s ", buf);
 	if (1 != v)
 		return -EINVAL;