Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 34069958 authored by Kiran Kumar Lokere's avatar Kiran Kumar Lokere Committed by nshrivas
Browse files

qcacmn: Fix the possible OOB access in channel avoid event 

Fix the possible out of bound access while processing the
channel avoid frequency event from FW.

Change-Id: Ib49df0ebd785944b7cbbfa5927613887dd35d9ff
CRs-Fixed: 2308629
parent 75ebd645

wmi/src/wmi_unified_tlv.c

+4 −0
Original line number Diff line number Diff line
@@ -20446,6 +20446,10 @@ static QDF_STATUS extract_reg_ch_avoid_event_tlv( 
		WMI_LOGE("Invalid channel avoid indication buffer");

		return QDF_STATUS_E_INVAL;

	}

	if (param_buf->num_avd_freq_range < afr_fixed_param->num_freq_ranges) {

		WMI_LOGE(FL("no.of freq ranges exceeded the limit"));

		return QDF_STATUS_E_INVAL;

	}

	num_freq_ranges = (afr_fixed_param->num_freq_ranges >

			CH_AVOID_MAX_RANGE) ? CH_AVOID_MAX_RANGE :

			afr_fixed_param->num_freq_ranges;