samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

qcacld-3.0: Validate the size of each frequecy sub attribute

Browse Source 
QCA_ATTR_ROAM_CONTROL_SCAN_FREQ_LIST is a nested attribute which
carries frequencies as sub attributes. Validate the size of each
sub attribute to make sure it's of size uint32_t. Extract the
frequencies if all are of valid size. Return failure if an
invalid length attribute is found.

Change-Id: I1743c2dbef640b28b78504a548edbb70f4f29e49
CRs-Fixed: 2513822
This commit is contained in:
Srinivas Dasari
2019-08-23 07:21:46 +05:30
committed by nshrivas
parent 3d18e556d0
commit ac5312a188
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
core/hdd/src/wlan_hdd_cfg80211.c
View File

@@ -4104,8 +4104,14 @@ hdd_send_roam_scan_channel_freq_list_to_sme(struct hdd_context *hdd_ctx,
} }
num_chan = 0; num_chan = 0;
nla_for_each_nested(curr_attr, tb2[PARAM_SCAN_FREQ_LIST], rem) nla_for_each_nested(curr_attr, tb2[PARAM_SCAN_FREQ_LIST], rem) {
if (nla_len(curr_attr) != sizeof(uint32_t)) {
hdd_err("len is not correct for frequency %d",
num_chan);
return QDF_STATUS_E_INVAL;
}
freq_list[num_chan++] = nla_get_u32(curr_attr); freq_list[num_chan++] = nla_get_u32(curr_attr);
}
status = sme_update_roam_scan_freq_list(mac_handle, vdev_id, freq_list, status = sme_update_roam_scan_freq_list(mac_handle, vdev_id, freq_list,
num_chan, list_type); num_chan, list_type);