hqu c783c07b93 qcacmn: Fix possible OOB read in extract_mac_phy_cap_service_ready_ext_tlv
In extract_mac_phy_cap_service_ready_ext() the field num_hw_modes
of hw_caps is used as loop bounds and may be attacked.

hw_mode_caps is a pointer defined by firmware. The exact array
length cannot be got since hw_mode_caps pointing array length
is variable. Fix is to add check for field num_hw_modes of hw_caps.

Change-Id: Ie234db3f2356186a4e7aac121ec88dd7e6453efd
CRs-Fixed: 2387221
2019-02-04 17:52:28 -08:00
2019-02-01 20:11:54 -08:00
2017-09-15 21:45:35 +05:30
2017-03-27 08:31:31 -07:00

 This is CNSS WLAN Host Driver for products starting from iHelium  
Popis
Nebyl uveden žádný popis
Readme 226 MiB
Jazyky
C 98.7%
C++ 0.9%
Makefile 0.3%
Starlark 0.1%