Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit be468730 authored by Harprit Chhabada's avatar Harprit Chhabada Committed by nshrivas
Browse files

qcacld-3.0: Fix OOB in wma_stats_event_handler

In wma_stats_event_handler several fields lengths are added
together to check against param_buf->num_data (the overall
length of the buffer).
The problem is that num_pdev_stats, num_vdev_stats and
num_peer_stats represent the number of structures of each
type rather than the total number of bytes.
Therefore update the logic to compare the expected size of
the entire payload to the actual payload.

Change-Id: I94af679480e62a61d4b25a1f370b2f199985f874
CRs-Fixed: 2429010
parent 533b55db
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment