joy/android_kernel_sony_sdm845
Watch
1
Fork
You've already forked android_kernel_sony_sdm845
 0
Code Issues Pull requests Projects Releases Wiki Activity

Merge tag 'LA.UM.8.3.c25-10700-sdm845.0' of https://git.codelinaro.org/clo/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0 into android13-4.9-sdm845

Browse source 
"LA.UM.8.3.c25-10700-sdm845.0"

* tag 'LA.UM.8.3.c25-10700-sdm845.0' of https://git.codelinaro.org/clo/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0:
  qcacld-3.0: Correcting the TSInfo structure size according to the Spec
  qcacld-3.0: Fix the possible OOB write in country IE unpack

Change-Id: Id4c60937c4fe708585ba68c1046874c24e051c85
This commit is contained in:
Michael Bestas 2025-07-22 13:31:59 +03:00 • committed by Nolen Johnson
commit e5371c2ee3
3 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
drivers/staging/qcacld-3.0/core/mac/src/cfg/cfgUtil/dot11f.frms
View file

@ -365,7 +365,7 @@ FF SMPowerModeSet (1) //7.3.1.25
}
}
FF TSInfo (3) // 7.3.2.30
FF TSInfo (4) // 7.3.2.30
{
{
traffic_type: 1;

4
drivers/staging/qcacld-3.0/core/mac/src/include/dot11f.h
View file

@ -26,7 +26,7 @@
*
*
* This file was automatically generated by 'framesc'
* Wed Sep 29 13:23:21 2021 from the following file(s):
* Wed Sep 11 12:49:28 2024 from the following file(s):
*
* dot11f.frms
*
@ -441,7 +441,7 @@ typedef struct sDot11fFfTSInfo {
uint32_t unused:15;
} tDot11fFfTSInfo;
#define DOT11F_FF_TSINFO_LEN (3)
#define DOT11F_FF_TSINFO_LEN (4)
void dot11f_unpack_ff_ts_info(tpAniSirGlobal, uint8_t *, tDot11fFfTSInfo *);

4
drivers/staging/qcacld-3.0/core/mac/src/sys/legacy/src/utils/src/dot11f.c
View file

@ -24,7 +24,7 @@
*
*
* This file was automatically generated by 'framesc'
* Wed Sep 29 13:23:21 2021 from the following file(s):
* Wed Sep 11 12:49:28 2024 from the following file(s):
*
* dot11f.frms
*
@ -15918,7 +15918,7 @@ uint32_t dot11f_get_packed_del_ts_size(tpAniSirGlobal pCtx,
tDot11fDelTS *pFrm, uint32_t *pnNeeded)
{
uint32_t status = 0;
*pnNeeded = 7;
*pnNeeded = 8;
status = get_packed_size_core(pCtx, (uint8_t *)pFrm, pnNeeded,
IES_DelTS);
return status;