| commit | f8abd3563ee045dd27c09eeee96bbc22de448f26 | [log] [tgz] |
|---|---|---|
| author | Sushant Kaushik <skaushik@qti.qualcomm.com> | Wed Jul 15 16:37:49 2015 +0530 |
| committer | Satyanarayana Dash <sadash@codeaurora.org> | Wed Jul 15 19:52:48 2015 +0530 |
| tree | 41459367d91db9d93183c2616ef9e9ddd4dee815 | |
| parent | bb8c52c4b3d796ce1f556502a0520bc5c1ef74c5 [diff] |
wlan: Fix buffer overwrite problem in GETCCXMODE If (len + 1) is greater than priv_data.total_len then copy_to_user results in writing more data than the buffer can hold. Fix this by writing mininum of (len + 1) and priv_data.total_len. Change-Id: Ibb765d280ee69930feee4aa221e30443d957f308 CRs-Fixed: 865574