net: wireless: bcmdhd: update bcm4358 FW (7.112.300.12)
Insun Song [Sat, 3 Jun 2017 00:55:33 +0000 (17:55 -0700)]
adding validation for WME IE length in assoc request/response/beacon
frame. This help to prevent buffer overrun especially when malformed
WME/WME_PARAMETER IE injected by driveby attck.

Change-Id: I0daf4a69a69348c09bec2a79bbbb479e2b3a1067
Signed-off-by: Insun Song <>
Bug: 38041027

bcmdhd/firmware/bcm4358/fw_bcm4358.bin [changed mode: 0755->0644]
bcmdhd/firmware/bcm4358/fw_bcm4358_ap.bin [changed mode: 0755->0644]

old mode 100755 (executable)
new mode 100644 (file)
index ddc5626..e26e0df
Binary files a/bcmdhd/firmware/bcm4358/fw_bcm4358.bin and b/bcmdhd/firmware/bcm4358/fw_bcm4358.bin differ
old mode 100755 (executable)
new mode 100644 (file)
index 77253b0..a4f8322
Binary files a/bcmdhd/firmware/bcm4358/fw_bcm4358_ap.bin and b/bcmdhd/firmware/bcm4358/fw_bcm4358_ap.bin differ