net: wireless: bcmdhd: update bcm4358 FW ( [DO NOT MERGE]
Insun Song [Sat, 3 Jun 2017 01:15:08 +0000 (18:15 -0700)]
adding validation for WME IE length in assoc request/response/beacon
frame. This help to prevent buffer overrun especially when malformed
WME/WME_PARAMETER IE injected by driveby attck.

Change-Id: I6dbe2b534d8d5aedac0bdfa8e5459d7d9a3ba4dd
Signed-off-by: Insun Song <>
Bug: 38041027

bcmdhd/firmware/bcm4358/fw_bcm4358.bin [changed mode: 0755->0644]
bcmdhd/firmware/bcm4358/fw_bcm4358_ap.bin [changed mode: 0755->0644]

old mode 100755 (executable)
new mode 100644 (file)
index 2ae8dab..fd4c428
Binary files a/bcmdhd/firmware/bcm4358/fw_bcm4358.bin and b/bcmdhd/firmware/bcm4358/fw_bcm4358.bin differ
old mode 100755 (executable)
new mode 100644 (file)
index 19c26a8..20a0bcc
Binary files a/bcmdhd/firmware/bcm4358/fw_bcm4358_ap.bin and b/bcmdhd/firmware/bcm4358/fw_bcm4358_ap.bin differ