commit | 6b0ed167ad56f4886306e9d6048b211297d6b8b5 | [log] [tgz] |
---|---|---|
author | Arif Hussain <arifhussain@codeaurora.org> | Fri Sep 14 16:52:24 2018 -0700 |
committer | nshrivas <nshrivas@codeaurora.org> | Mon Sep 17 21:29:04 2018 -0700 |
tree | 11aa638888c70cfeb80f81d5ca43ba8c9b4df80c | |
parent | 0b0463506cc54dee9fb631f9c28e599ed58ebaf1 [diff] |
qcacld-3.0: Fix possible OOB in wma_unified_radio_tx_mem_free() In wma_unified_radio_tx_mem_free() function, results buffer array may be dereferenced with large index value, that may result OOB memory access. Fix the same by correcting incrementing pointer to results buffer. Change-Id: I57a26dba9db32758c7d7fd51b99d3364a8020a9d CRs-Fixed: 2308644