| commit | 4bc43ac68ac9316c3a5db89e9082a84c6ad47a79 | [log] [tgz] |
|---|---|---|
| author | Alok Kumar <alokkuma@codeaurora.org> | Thu Jan 11 12:14:15 2018 +0530 |
| committer | snandini <snandini@codeaurora.org> | Wed Jan 24 21:43:27 2018 -0800 |
| tree | 12449987ca543cbeca49c5c7b7c5fda259dd7ecd | |
| parent | 88f50c14f7de1b06fe42237cf0b46851d47ec9c5 [diff] |
qcacld-3.0: Fix buffer overflow in htt_t2h_rx_in_order_indication_handler Currently variable "tid" is from message, which is used directly as array size which causes buffer over-write. To address this issue add check for the array size. Change-Id: I9b9d028ddb9566938f93ff8155284876c1ef9c03 CRs-Fixed: 2146949