| commit | 69d0780f6ee3d34a87f3fcec0ec1b8bec2195d47 | [log] [tgz] |
|---|---|---|
| author | Sourav Mohapatra <mohapatr@codeaurora.org> | Thu May 31 17:09:05 2018 +0530 |
| committer | nshrivas <nshrivas@codeaurora.org> | Mon Jun 18 16:33:09 2018 -0700 |
| tree | e0ef9381ada635f14960447a4f338d1d3606cc2d | |
| parent | 577f1450a81259f5d731c85468b9932015719e0f [diff] |
qcacld-3.0: Check buff len alloc in __iw_set_packet_filter_params In __iw_set_packet_filter_params(), a user controlled length value, priv_data.length, is used to allocated a buffer. This buffer is then cast to a struct pointer of struct pkt_filter_cfg type without ensuring the buffer is of proper length. Add a sanity check on priv_data.length to ensure that the command being issued has proper parameters. Change-Id: Ia871e35ef938ca889fb6b1609a0c881d76f29e4b CRs-Fixed: 2250775