| commit | adb1b654b7f83fc0925d87659c3965649f251f15 | [log] [tgz] |
|---|---|---|
| author | Vignesh Viswanathan <viswanat@codeaurora.org> | Wed Oct 04 20:09:09 2017 +0530 |
| committer | snandini <snandini@codeaurora.org> | Fri Oct 06 14:18:10 2017 -0700 |
| tree | d0a8b2d0f15d5e628c033d8eccc1713aa7035cf2 | |
| parent | 847dd5d5099d51cc73285f1aa8223e599abad3d2 [diff] |
qcacld-3.0: Add check for if_id in wma_tbttoffset_update_event_handler Currently if_id used in the for loop is incremented based on vdev_map != 0 and vdev_map is a uint_32, received from FW, and is right shifted by one bit for each iteration. This could result in if_id going upto max of 31 and cause OOB read. Add sanity check to make sure if_id is less than max_bssid. Change-Id: I7e0c4e9a26cb67f41e35c60c2756d7ad02cf43ea CRs-Fixed: 2119443