Commit 0ed8dbf0 authored by Vinay Gannevaram's avatar Vinay Gannevaram Committed by Sunil Ravi
Browse files

qcwcn: Heap-buffer-overflow in register_monitor_sock() of wifi hal



This changes is to avoid the buffer-overflow in register_monitor_sock()
where "nreg->monsock" is getting filled with the data of length
"ctrl_msg->monsock_len" without the validation of length. Address this
issue by have a length check done before filling the buffer.

Bug: 149836664
Test: Manual - Basic wifi sanity test
CRs-Fixed: 2604404
Change-Id: I36b7ac274bd4f92eceabd5bd6534c73ae5a9ae73
Signed-off-by: default avatarVinay Gannevaram <quic_vganneva@quicinc.com>
parent 0a1b2115
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment