Alok Kumar 3a7a4407d5 qcacld-3.0: Fix buffer overflow for HTT_T2H_MSG_TYPE_FLOW_POOL_MAP ...

Currently variable "num_flows" and "len" is used directly, from
message, without any validation which causes buffer over-write.

To address this issue add check for the num_flows and len

Change-Id: Iddf2df0fd65f5b33b54f1a608cdd34e400c0e03c
CRs-Fixed: 2148489

2018-02-07 04:52:48 -08:00

..

htt_fw_stats.c

qcacld-3.0: Use qdf_dbg instead of qdf_print for non-error logs

2017-09-27 17:30:39 -07:00

htt_h2t.c

qcacld-3.0: Add warning log for IPA session control critical code path

2017-10-26 21:49:24 -07:00

htt_internal.h

qcacld-3.0: Reorganize the tx & rx member of skb->cb structure

2017-12-02 01:40:47 -08:00

htt_rx.c

qcacld-3.0: Enable 64-bit htt rx addr tracking based on HTT_PADDR64

2018-01-08 14:26:06 -08:00

htt_t2h.c

qcacld-3.0: Fix buffer overflow for HTT_T2H_MSG_TYPE_FLOW_POOL_MAP

2018-02-07 04:52:48 -08:00

htt_tx.c

qcacld-3.0: Buffer count be power of 2 and unmap nbuf

2018-02-03 05:32:33 -08:00

htt_types.h

qcacld-3.0: Add net buff pop fail counter

2017-10-03 07:46:18 -07:00

htt.c

qcacld-3.0: Optimize driver init time log from HIF layer

2018-01-22 21:24:21 -08:00

rx_desc.h

qcacld-3.0: Replace HELIUMPLUS_PADDR64 with HELIUMPLUS

2017-03-05 21:26:23 -08:00