Răsfoiți Sursa

qcacld-3.0: Fix potential out of memory access

Check num_ml_sta valid or not from API policy_mgr_get_ml_sta_info
result.

Change-Id: Id53764004110d21e34a8f059e8448d059737a9f6
CRs-Fixed: 3354411
Liangwei Dong 2 ani în urmă
părinte
comite
f327b00ab4

+ 2 - 2
components/cmn_services/policy_mgr/src/wlan_policy_mgr_get_set_utils.c

@@ -4823,8 +4823,8 @@ policy_mgr_handle_ml_sta_link_state_allowed(struct wlan_objmgr_psoc *psoc)
 	policy_mgr_get_ml_sta_info(pm_ctx, &num_ml_sta, &num_disabled_ml_sta,
 				   ml_sta_vdev_lst, ml_freq_lst, &num_non_ml,
 				   NULL, NULL);
-	if (!num_ml_sta) {
-		policy_mgr_debug("ml sta num is zero");
+	if (!num_ml_sta || num_ml_sta > MAX_NUMBER_OF_CONC_CONNECTIONS) {
+		policy_mgr_debug("ml sta num is %d", num_ml_sta);
 		return QDF_STATUS_E_INVAL;
 	}