Yeshwanth Sriram Guntuka 59648ac529 qcacmn: Fix out of bound access in extract_single_phyerr_tlv ...

Bufp and buf_len are populated in extract_comb_phyerr_tlv
without validating the buf_len which can cause possible
out of bound access in dfs_phyerr_event_handler.

Fix is to validate the buf_len against num_bufp in param_tlvs.

Change-Id: I95e18d7600f8419f31e768fcc18c3024fe37b7db
CRs-Fixed: 2321371

2018-10-08 15:56:56 -07:00

..

inc

qcacmn: Add vdev id sanity check in extract_gtk_rsp_event_tlv

2018-10-08 05:26:45 -07:00

src

qcacmn: Fix out of bound access in extract_single_phyerr_tlv

2018-10-08 15:56:56 -07:00