c783c07b93ca0df9abf58308ff8793b4514fce15

In extract_mac_phy_cap_service_ready_ext() the field num_hw_modes of hw_caps is used as loop bounds and may be attacked. hw_mode_caps is a pointer defined by firmware. The exact array length cannot be got since hw_mode_caps pointing array length is variable. Fix is to add check for field num_hw_modes of hw_caps. Change-Id: Ie234db3f2356186a4e7aac121ec88dd7e6453efd CRs-Fixed: 2387221
This is CNSS WLAN Host Driver for products starting from iHelium
Popis
Jazyky
C
98.7%
C++
0.9%
Makefile
0.3%
Starlark
0.1%