瀏覽代碼

qcacld-3.0: Trim operation classes to max supported in change station

qcacld-2.0 to qcacld-3.0 Propagation.

Operation classes supported can be controlled by user, which can
be sent greater than the max supported operations. This results
in stack overflow in change station command.

Add check to validate operations supported param given by user
and if it exceeds max supported value, set it to max supported
value.

CRs-Fixed: 2002052
Change-Id: Idd3a35e38b091546a17d7ec6329f19429e5c289c
SaidiReddy Yenuga 8 年之前
父節點
當前提交
a56dc1e5b0
共有 1 個文件被更改,包括 8 次插入0 次删除
  1. 8 0
      core/hdd/src/wlan_hdd_cfg80211.c

+ 8 - 0
core/hdd/src/wlan_hdd_cfg80211.c

@@ -12602,6 +12602,14 @@ static int __wlan_hdd_change_station(struct wiphy *wiphy,
 				hdd_debug("After removing duplcates StaParams.supported_channels_len: %d",
 				hdd_debug("After removing duplcates StaParams.supported_channels_len: %d",
 					  StaParams.supported_channels_len);
 					  StaParams.supported_channels_len);
 			}
 			}
+			if (params->supported_oper_classes_len >
+			    CDS_MAX_SUPP_OPER_CLASSES) {
+				hdd_notice("received oper classes:%d, resetting it to max supported: %d",
+					  params->supported_oper_classes_len,
+					  CDS_MAX_SUPP_OPER_CLASSES);
+				params->supported_oper_classes_len =
+					CDS_MAX_SUPP_OPER_CLASSES;
+			}
 			qdf_mem_copy(StaParams.supported_oper_classes,
 			qdf_mem_copy(StaParams.supported_oper_classes,
 				     params->supported_oper_classes,
 				     params->supported_oper_classes,
 				     params->supported_oper_classes_len);
 				     params->supported_oper_classes_len);