tree f9bbdd6f7f3a09ed538f737060d8b94a528c8dd6
parent 0ed8dbf042a7b00ad9efa10d1f6a945b1423682f
author Vinay Gannevaram <quic_vganneva@quicinc.com> 1583154418 +0530
committer Sunil Ravi <sunilravi@google.com> 1583454991 -0800

WifiHal: Fix OOB read of ctrl buf while registering monitor sock

Boundary check for NLMSG length is not present, which would
result in OOB read of the buffer during nla parse. Hence add
required boundary checks before processing ctrl msg from
wifihal clients. Also allocate required buffer for control
events to the size of received nlmsg data

Bug: 149836664
Test: Manual - Basic wifi sanity test
CRs-Fixed: 2628103
Change-Id: Idc971a343f30e41f359180757f108a8c0dfe2a7e
Signed-off-by: Vinay Gannevaram <quic_vganneva@quicinc.com>