| commit | 48bfa583a4fae0ba062138b455ebdb8887c22f29 | [log] [tgz] |
|---|---|---|
| author | Insun Song <insun.song@broadcom.com> | Fri Jun 02 18:15:08 2017 -0700 |
| committer | android-build-team Robot <android-build-team-robot@google.com> | Tue Jun 13 18:08:47 2017 +0000 |
| tree | 0f5925126ca82bc7b5609868c7556fc1cf480eef | |
| parent | 415567e958fb989c6ae11c046aa3a2e9c9405faa [diff] |
net: wireless: bcmdhd: update bcm4358 FW (7.112.201.4) [DO NOT MERGE] adding validation for WME IE length in assoc request/response/beacon frame. This help to prevent buffer overrun especially when malformed WME/WME_PARAMETER IE injected by driveby attck. Change-Id: I6dbe2b534d8d5aedac0bdfa8e5459d7d9a3ba4dd Signed-off-by: Insun Song <insun.song@broadcom.com> Bug: 38041027 (cherry picked from commit d09c96966de0c41bfa4efe372e3f21affbae7082)