1
0
abhinav kumar 0df0ae40b0 qcacmn: Possible OOB read in process_fw_diag_event_data
API "fw_diag_data_event_handler" is the handler of an event
WMI_DIAG_DATA_CONTAINER_EVENTID comes from FW. Arguments of
this handler function come from FW.

If num_data may be less than size of(struct wlan_diag_data),
possible OOB while extracting event data.

Fix is to add a sanity check for num_data to avoid the OOB
read.

Change-Id: Ia2eb62dbaa154936bdb4ea34065657d441f12810
CRs-Fixed: 3001178
2021-08-19 22:17:46 -07:00
2021-08-19 07:07:04 -07:00
2021-08-12 05:32:57 -07:00
2021-05-28 03:47:12 -07:00
2021-08-17 15:46:43 -07:00
2017-09-15 21:45:35 +05:30
2017-03-27 08:31:31 -07:00

 This is CNSS WLAN Host Driver for products starting from iHelium  
Descrição
Descrição não fornecida
Leia-me 226 MiB
Linguagens
C 98.7%
C++ 0.9%
Makefile 0.3%
Starlark 0.1%