Android 13.0.0 Release 0.68 (TQ2A.230405.003,raven/oriole)
bcmdhd: Fixed Memory Overwrite in function add_roam_cache_list
In add_roam_cache_list of wl_roam.c, there is a possible out of bounds write due to a missing bounds check.
Fix:
1. Added bounds check
2. If SSID_len is bigger than 32, do not update that list in the roam cache list.
Bug: 254028776
Test: BRCM Internal test is finished without regression.
Change-Id: Ifaf4a5c963e89dde3fed39888c4fa83d093f5e25
Signed-off-by: Sungjoon Park <sungjoon.park@broadcom.corp-partner.google.com>
1 file changed