net: wireless: bcmdhd: update bcm4354/56 FW (7.35.101.6)
authorInsun Song <insun.song@broadcom.com>
Mon, 5 Jun 2017 16:42:44 +0000 (09:42 -0700)
committerEcco Park <eccopark@google.com>
Mon, 5 Jun 2017 17:54:10 +0000 (10:54 -0700)
commitc59d2fbfe0ca8cc2a7419a860bfd5f48c7b66066
treeacb1aefc007fbe0423da8563cfaed89ef1b1e8b6
parentf57fbe161190c2910c349b2b3af0b9b27c6a1c91
net: wireless: bcmdhd: update bcm4354/56 FW (7.35.101.6)

adding validation for WME IE length in assoc request/response/beacon
frame. This help to prevent buffer overrun especially when malformed
WME/WME_PARAMETER IE injected by driveby attck.

Signed-off-by: Insun Song <insun.song@broadcom.com>
Bug: 38041027
Change-Id: Id3bcc264801582b1e283f3b3f7d9053681e3ce8e
bcmdhd/firmware/bcm4354/fw_bcm4354.bin
bcmdhd/firmware/bcm4354/fw_bcm4354_ap.bin
bcmdhd/firmware/bcm4356/fw_bcm4356_ap_pcie.bin [changed mode: 0755->0644]
bcmdhd/firmware/bcm4356/fw_bcm4356_pcie.bin [changed mode: 0755->0644]