Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b49a3191 authored by Jingxiang Ge's avatar Jingxiang Ge Committed by nshrivas
Browse files

qcacld-3.0: Fix buffer overwrite problem in GETIBSSPEERINFO 

If (length + 1) is greater than priv_data.total_len then copy_to_user
results in writing more data than the buffer can hold.
Fix this by writing mininum of (length + 1) and priv_data->total_len.

Change-Id: If0c74b3c6c76ee3ca296fd8e0e844b9c53c30498
CRs-Fixed: 2386056
parent f771e500
Show whitespace changes
Inline Side-by-side
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment