Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d8bfab39 authored by Sarada Prasanna Garnayak's avatar Sarada Prasanna Garnayak Committed by Gerrit - the friendly Code Review server
Browse files

wcnss: fix the potential buffer flow issue in firmware setup 



Add the check against negative or invalid firmware size passed
by the userspace thread in firmware setup sysfs write operation.
Update the datatype of the variable which holds the firmware size
passed by userspace thread during firmware setup and WLAN calibration
data update process.

CRs-Fixed: 2072966
Change-Id: I8c84ad0d1b0a5f44a39c9c5b228734b0f693e8dd
Signed-off-by: default avatarSarada Prasanna Garnayak <sgarna@codeaurora.org>
parent 9023a992

drivers/net/wireless/wcnss/wcnss_wlan.c

+1 −1
Original line number Diff line number Diff line
@@ -397,7 +397,7 @@ static struct { 
	int	user_cal_read;

	int	user_cal_available;

	u32	user_cal_rcvd;

	int	user_cal_exp_size;

	u32	user_cal_exp_size;

	int	iris_xo_mode_set;

	int	fw_vbatt_state;

	char	wlan_nv_macAddr[WLAN_MAC_ADDR_SIZE];