commit 107ae7a83f8d4a342c92aeefe16e6fea8507d3ca
author c_manjee <c_manjee@qti.qualcomm.com> Fri Nov 13 22:28:50 2015 +0530
committer Anjaneedevi Kapparapu <akappa@codeaurora.org> Sat Nov 14 20:23:59 2015 +0530
tree cbd20975d2d56623a3415ad7d737d336e3c6ad78
parent 675e93f8241d6926397f67ddb9b838577d346b0b

wlan : Stack corruption in processing FW MEM DUMP

Resolved stack corruption in WDI_ProcessFwrMemDumpRsp
due to incorrect size specified to memcpy function.
Size corrected to match the data copied.

Change-Id: I91e17f80d353ee2a442eb37562c4ee76ee4b8c88
CRs-Fixed: 939204

CORE/WDI/CP/src/wlan_qct_wdi.c

diff --git a/CORE/WDI/CP/src/wlan_qct_wdi.c b/CORE/WDI/CP/src/wlan_qct_wdi.c
index 3da8295..0960678 100644
--- a/CORE/WDI/CP/src/wlan_qct_wdi.c
+++ b/CORE/WDI/CP/src/wlan_qct_wdi.c
@@ -35289,7 +35289,7 @@
   /*-------------------------------------------------------------------------
     Extract response and send it to UMAC
   -------------------------------------------------------------------------*/
-  wpalMemoryCopy( &halRsp.tFwMemoryDumpResp, pEventData->pEventData, sizeof(halRsp));
+  wpalMemoryCopy( &halRsp.tFwMemoryDumpResp, pEventData->pEventData, sizeof(halRsp.tFwMemoryDumpResp));
 
   wdiFwrMemDumpRsp.dump_status = WDI_HAL_2_WDI_STATUS(halRsp.tFwMemoryDumpResp.status);