| commit | f3a2ea90b8407a0519f426340d5f242c2d9ad89c | [log] [tgz] |
|---|---|---|
| author | Will Huang <wilhuang@codeaurora.org> | Mon Jun 26 10:34:25 2017 +0800 |
| committer | snandini <snandini@codeaurora.org> | Tue Aug 08 01:21:48 2017 -0700 |
| tree | e2c1308da7e3da5ed08298bcd4724bd0579cf0cb | |
| parent | fde6b9e55152944297eb85f09c2581196b6c38b1 [diff] |
qcacmn: Check mbox_index as index and check pointer hif_dev_map_pipe_to_mail_box may return 255 and assign to mbox_index, which will cause buffer overflow. Another issue is missing NULL check after allocate memory in function hif_dev_send_buffer. Fix it by checking NULL/invalid return pointer/index value. Change-Id: If7b954343847097b7b5b601c684fe6b51d90daa4 CRs-Fixed: 2058300