| commit | 561e3ed2aec2b6425b89e732e5479106bc696950 | [log] [tgz] |
|---|---|---|
| author | Dundi Raviteja <dundi@codeaurora.org> | Mon Oct 08 11:55:00 2018 +0530 |
| committer | nshrivas <nshrivas@codeaurora.org> | Thu Oct 11 05:35:22 2018 -0700 |
| tree | 63265886bb18fafe03484bc88a9efd7d753816ea | |
| parent | c2ad86c5758625d16688932d55bfa936ac7a453c [diff] |
qcacld-3.0: Possible OOB access in wlan_hdd_cfg80211_start_bss() Currently in function wlan_hdd_cfg80211_start_bss(), copying supported rates and extended rates from information element pointer without checking for array bounds which may cause OOB access. To address this issue, add length checks before copying supported rates and extended rates. Change-Id: Ic6363e97bb3498a5dd23bc5e5f9b9f3ce093509d CRs-Fixed: 2312995