Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d60584ac authored by Arif Hussain's avatar Arif Hussain Committed by Gerrit - the friendly Code Review server
Browse files

qcacmn: Fix possible OOB read in extract_reg_cap_service_ready_ext_tlv 

OOB read can occur while handling WMI_SERVICE_READY_EXT_EVENTID event
when large invalid num_phy received in that event, as this value is used
as index to array.

Change-Id: I0e80d04d19160e219028b07599a8b9953a798fb2
CRs-Fixed: 2374726
parent c4905c56
Show whitespace changes
Inline Side-by-side
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment