Răsfoiți Sursa

qcacld-3.0: Add lost AP sample size entry to nla policy

qcacld-2.0 to qcacld-3.0 Propagation.

improper validation of
QCA_WLAN_VENDOR_ATTR_EXTSCAN_BSSID_HOTLIST_PARAMS_LOST_AP_SAMPLE_SIZE
results in assigning an unchecked user-controller value.
This can lead to buffer overflow.

validate QCA_WLAN_VENDOR_ATTR_EXTSCAN_BSSID_HOTLIST_PARAMS_LOST_AP_SAMPLE_SIZE.

CRs-Fixed: 2056253
Change-Id: I7c33b6d78054672e9effbe9100c29e5604c250c6
SaidiReddy Yenuga 8 ani în urmă
părinte
comite
dec1bfc9dc
1 a modificat fișierele cu 2 adăugiri și 0 ștergeri
  1. 2 0
      core/hdd/src/wlan_hdd_ext_scan.c

+ 2 - 0
core/hdd/src/wlan_hdd_ext_scan.c

@@ -134,6 +134,8 @@ static const struct nla_policy wlan_hdd_extscan_config_policy
 				.type = NLA_S32 },
 	[QCA_WLAN_VENDOR_ATTR_EXTSCAN_CONFIGURATION_FLAGS] = {
 				.type = NLA_U32 },
+	[QCA_WLAN_VENDOR_ATTR_EXTSCAN_BSSID_HOTLIST_PARAMS_LOST_AP_SAMPLE_SIZE] = {
+				.type = NLA_U32},
 };
 
 static const struct nla_policy