Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Unverified Commit dfa214a7 authored by Debasis Das's avatar Debasis Das Committed by derfelot
Browse files

qcacmn: Fix Integer Overflow Leading to Buffer Overflow



wmi_buf_alloc() API expects length to be passed of type
uint16_t. However, the callers pass uint32_t to it.
This might result in overflow and illegal memory access
thereafter. The fix is to modify the API signature accordingly.

Change-Id: If09da4978d421269b884f7d3c933c49c81651475
CRs-Fixed: 2218346
Signed-off-by: default avatarderfelot <derfelot.git@gmail.com>
parent e62b4ec5
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment