{"push_id":661890996,"size":2,"distinct_size":2,"ref":"refs/heads/caf/LNX.LA.3.5.2_RB1.1","head":"e563b9f8735ec10efa2eb04ef93324264b8f62ec","before":"6125890eafc4aec877536be5f5b293a47287f09a","commits":[{"sha":"199a73df8e3861c2b0a9e6a1dfa66a4c8d83d529","author":{"email":"60fc0a3d472aaa2d436c869c504a67f76c906ae8@qca.qualcomm.com","name":"Jouni Malinen"},"message":"P2P: Validate SSID element length before copying it\n\nThis fixes a possible memcpy overflow for P2P dev->oper_ssid in\np2p_add_device(). The length provided by the peer device (0..255 bytes)\nwas used without proper bounds checking and that could have resulted in\narbitrary data of up to 223 bytes being written beyond the end of the\ndev->oper_ssid[] array (of which about 150 bytes would be beyond the\nheap allocation) when processing a corrupted management frame for P2P\npeer discovery purposes.\n\nThis could result in corrupted state in heap, unexpected program\nbehavior due to corrupted P2P peer device information, denial of service\ndue to process crash, exposure of memory contents during GO Negotiation,\nand potentially arbitrary code execution.\n\nThanks to Google security team for reporting this issue and smart\nhardware research group of Alibaba security team for discovering it.\n\nSigned-off-by: Jouni Malinen <jouni@qca.qualcomm.com>\n\nGit-repo: git://w1.fi/srv/git/hostap.git\nGit-commit: 9ed4eee345f85e3025c33c6e20aa25696e341ccd\nCRs-Fixed: 819135\nChange-Id: Ieb7a14af9751a75cf3f209408e5c09c44f0d37db","distinct":true,"url":"https://api.github.com/repos/codeaurora-unoffical/platform-external-wpa_supplicant_8/commits/199a73df8e3861c2b0a9e6a1dfa66a4c8d83d529"},{"sha":"e563b9f8735ec10efa2eb04ef93324264b8f62ec","author":{"email":"d3c7bae90ce2477533ec852edf38b65198016249@localhost","name":"Linux Build Service Account"},"message":"Merge 199a73df8e3861c2b0a9e6a1dfa66a4c8d83d529 on remote branch\n\nChange-Id: Id0d03b848a3e10e5e4b4dd57585161e27969d5d6","distinct":true,"url":"https://api.github.com/repos/codeaurora-unoffical/platform-external-wpa_supplicant_8/commits/e563b9f8735ec10efa2eb04ef93324264b8f62ec"}]}