| commit | ac6345d29f3c3ccf65bafe6bf51f501e0f575054 | [log] [tgz] |
|---|---|---|
| author | Rajeev Kumar Sirasanagandla <rsirasan@codeaurora.org> | Wed Aug 30 23:09:08 2017 +0530 |
| committer | Rajeev Kumar Sirasanagandla <rsirasan@codeaurora.org> | Thu Aug 31 19:03:36 2017 +0530 |
| tree | 197553a4a9837121c70ae4b7b2236741d6ff2950 | |
| parent | e3beee29b536216c1dd268c37166e8e1e7cea410 [diff] |
wlan: Fix invalid buffer access in send mgmt tx qcacld-2.0 to prima propagation In __wlan_hdd_mgmt_tx, there is potential buffer over-read in access of public action frame type due to array index out of bounds. To address this, check for payload length before WLAN_HDD_PUBLIC_ACTION_FRAME_TYPE_OFFSET access. Change-Id: I9e3b4ef0878d934f3425d91bb6ea4a37b1892a3d CRs-Fixed: 2100690