net: wireless: bcmdhd: update bcm4354/56 FW (7.35.101.6)
Insun Song [Mon, 5 Jun 2017 16:42:44 +0000 (09:42 -0700)]
adding validation for WME IE length in assoc request/response/beacon
frame. This help to prevent buffer overrun especially when malformed
WME/WME_PARAMETER IE injected by driveby attck.

Signed-off-by: Insun Song <insun.song@broadcom.com>
Bug: 38041027
Change-Id: Id3bcc264801582b1e283f3b3f7d9053681e3ce8e

bcmdhd/firmware/bcm4354/fw_bcm4354.bin
bcmdhd/firmware/bcm4354/fw_bcm4354_ap.bin
bcmdhd/firmware/bcm4356/fw_bcm4356_ap_pcie.bin [changed mode: 0755->0644]
bcmdhd/firmware/bcm4356/fw_bcm4356_pcie.bin [changed mode: 0755->0644]

index 724b1fa..c17696d 100644 (file)
Binary files a/bcmdhd/firmware/bcm4354/fw_bcm4354.bin and b/bcmdhd/firmware/bcm4354/fw_bcm4354.bin differ
index 9c95b5c..927c148 100644 (file)
Binary files a/bcmdhd/firmware/bcm4354/fw_bcm4354_ap.bin and b/bcmdhd/firmware/bcm4354/fw_bcm4354_ap.bin differ
old mode 100755 (executable)
new mode 100644 (file)
index f25ff54..891f9cf
Binary files a/bcmdhd/firmware/bcm4356/fw_bcm4356_ap_pcie.bin and b/bcmdhd/firmware/bcm4356/fw_bcm4356_ap_pcie.bin differ
old mode 100755 (executable)
new mode 100644 (file)
index 2544f66..4224238
Binary files a/bcmdhd/firmware/bcm4356/fw_bcm4356_pcie.bin and b/bcmdhd/firmware/bcm4356/fw_bcm4356_pcie.bin differ