| commit | d2967a742c4fd97072932bb9f5be654ff0808905 | [log] [tgz] |
|---|---|---|
| author | gaurank kathpalia <gkathpal@codeaurora.org> | Tue May 01 12:35:14 2018 +0530 |
| committer | nshrivas <nshrivas@codeaurora.org> | Sat May 05 09:21:29 2018 -0700 |
| tree | d1f2d30acddeda241b628786d0b899f2d5014413 | |
| parent | 28f46b45d67f54792d0aa222272ae9354af365a7 [diff] |
qcacld-3.0: Fix OOB write in vdev_mac_map In the API wma_process_pdev_hw_mode_trans_ind the host doesnt check the upper limit of num_vdev_mac_entries received from the firmware, and fills the same to the host structure hw_mode_trans_ind, which may cause OOB write. Fix is to check for the max vdev supported in the same API and return if the condition is false. Change-Id: I54a9e12f777b87b49057d6c97c06ab71b9ad1d77 CRs-Fixed: 2221965