67f5b87203
Currently in __wlan_hdd_cfg80211_p2p_lo_start() there are multiple issues with the incoming cfg80211 vendor command handling: 1) A policy is not supplied when invoking nla_parse() which prevents basic sanity of the incoming attribute stream. 2) The length of attribute QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_DEVICE_TYPES is not properly validated. 3) The length of attribute QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_VENDOR_IE is not properly validated. To address these issues: 1) Create an appropriate nla_policy and specify this policy when invoking nla_parse(). 2) Validate the length of QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_DEVICE_TYPES properly to prevent potential over read. 3) Validate the length of QCA_WLAN_VENDOR_ATTR_P2P_LISTEN_OFFLOAD_VENDOR_IE properly to prevent potential over read. Change-Id: I0a76dad8cccc6158f7ef3da293a6462acd839bfb CRs-Fixed: 2054755
This is CNSS WLAN Host Driver for products starting from iHelium