diff options
| author | Hu Wang <huw@codeaurora.org> | 2021-01-27 10:53:17 +0800 |
|---|---|---|
| committer | Hsiu-Chang Chen <hsiuchangchen@google.com> | 2021-06-28 15:16:59 +0800 |
| commit | 9fe3a9f3484fff09fe7d28e1250ffa2d12f1b0ed (patch) | |
| tree | 3ff6a6f17723a3a45c7aa744e4547db988b72381 /qcwcn/wifi_hal/llstatscommand.h | |
| parent | d3d0a6c0adb9e9ba466132c6961824318e437b8c (diff) | |
| download | wlan-9fe3a9f3484fff09fe7d28e1250ffa2d12f1b0ed.tar.gz | |
llstats: Use mNumRadioAllocated for real radio stats recevied
Wifihal uses mNumRadio from QCA_WLAN_VENDOR_ATTR_LL_STATS_NUM_RADIOS,
but it shall use mNumRadioAllocated which is based on the real radio
stats received.
This avoids memory out-of-bound access.
Bug: 190878523
Test: Regression test
CRs-Fixed: 2863682
Change-Id: Ia1c8484307182a3fab8fbfbde2a9be9047eade61
Diffstat (limited to 'qcwcn/wifi_hal/llstatscommand.h')
| -rw-r--r-- | qcwcn/wifi_hal/llstatscommand.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/qcwcn/wifi_hal/llstatscommand.h b/qcwcn/wifi_hal/llstatscommand.h index 5d4c480..86b9672 100644 --- a/qcwcn/wifi_hal/llstatscommand.h +++ b/qcwcn/wifi_hal/llstatscommand.h @@ -83,7 +83,10 @@ private: u32 mRadioStatsSize; + // mNumRadios is decoded from tb_vendor[QCA_WLAN_VENDOR_ATTR_LL_STATS_NUM_RADIOS] + // nNumRadiosAllocated is the actual radio stats received. u8 mNumRadios; + u8 mNumRadiosAllocated; LLStatsCommand(wifi_handle handle, int id, u32 vendor_id, u32 subcmd); |