| commit | 03e2b595446db591673c11ea1c009399a04c2d58 | [log] [tgz] |
|---|---|---|
| author | Jingxiang Ge <jge@codeaurora.org> | Wed Jan 23 17:15:53 2019 +0800 |
| committer | nshrivas <nshrivas@codeaurora.org> | Mon Jan 28 01:57:14 2019 -0800 |
| tree | d10e239c15e76273424068c5094412f09a4bab40 | |
| parent | b4260d5e383b07900c5bfeafc616eb7749caf0e8 [diff] |
qcacld-3.0: Fix buffer overwrite problem in GETIBSSPEERINFO If (length + 1) is greater than priv_data.total_len then copy_to_user results in writing more data than the buffer can hold. Fix this by writing mininum of (length + 1) and priv_data->total_len. Change-Id: If0c74b3c6c76ee3ca296fd8e0e844b9c53c30498 CRs-Fixed: 2386056