| commit | 62a4e153dbcbb5403b220988d5f39503bab661e7 | [log] [tgz] |
|---|---|---|
| author | Sushant Kaushik <skaushik@qti.qualcomm.com> | Wed Jul 15 16:36:23 2015 +0530 |
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | Fri Jul 17 12:10:02 2015 -0700 |
| tree | ec03a896163dfbbc7fa83307b7e744720a6a53a8 | |
| parent | ddbb35068a02f4660654fd8aa0eaf0ca65407a1e [diff] |
wlan:Fix buffer overwrite problem in GETROAMSCANCHANNELMINTIME If (len + 1) is greater than priv_data.total_len then copy_to_user results in writing more data than the buffer can hold. Fix this by writing mininum of (len + 1) and priv_data.total_len. Change-Id: Ic7a76773875ed60d1c37498e25d3ee3f5650fcb8 CRs-Fixed: 865561