Преглед на файлове

qcacld-3.0: Fix potential out of memory access

Check num_ml_sta valid or not from API policy_mgr_get_ml_sta_info
result.

Change-Id: Id53764004110d21e34a8f059e8448d059737a9f6
CRs-Fixed: 3354411
Liangwei Dong преди 2 години
родител
ревизия
f327b00ab4
променени са 1 файла, в които са добавени 2 реда и са изтрити 2 реда
  1. 2 2
      components/cmn_services/policy_mgr/src/wlan_policy_mgr_get_set_utils.c

+ 2 - 2
components/cmn_services/policy_mgr/src/wlan_policy_mgr_get_set_utils.c

@@ -4823,8 +4823,8 @@ policy_mgr_handle_ml_sta_link_state_allowed(struct wlan_objmgr_psoc *psoc)
 	policy_mgr_get_ml_sta_info(pm_ctx, &num_ml_sta, &num_disabled_ml_sta,
 				   ml_sta_vdev_lst, ml_freq_lst, &num_non_ml,
 				   NULL, NULL);
-	if (!num_ml_sta) {
-		policy_mgr_debug("ml sta num is zero");
+	if (!num_ml_sta || num_ml_sta > MAX_NUMBER_OF_CONC_CONNECTIONS) {
+		policy_mgr_debug("ml sta num is %d", num_ml_sta);
 		return QDF_STATUS_E_INVAL;
 	}