commit 6245fcd336e90f0923e1bdeeff32b829ae276ac9
author SaidiReddy Yenuga <saidir@codeaurora.org> Wed May 03 13:13:33 2017 +0800
committer Jeron Susan <jeron.susan@hi-p.com> Wed May 03 13:16:18 2017 +0800
tree 9fe6fa816b45bb3c4ac37b71b5da06239cda0abe
parent 68edfc74abc8315073f358308562f362c4a368fb

qcacld-2.0: Trim operation classes to max supported in change station

Operation classes supported can be controlled by user, which can
be sent greater than the max supported operations. This results
in stack overflow in change station command.

Add check to validate operations supported param given by user
and if it exceeds max supported value, set it to max supported
value.

CRs-Fixed: 2002052
Change-Id: Idd3a35e38b091546a17d7ec6329f19429e5c289c

FPIIM-687

Change-Id: I4c29bb2ff2fd04b24bf6d36f745dc3f0d8794cc8

CORE/HDD/src/wlan_hdd_cfg80211.c

diff --git a/CORE/HDD/src/wlan_hdd_cfg80211.c b/CORE/HDD/src/wlan_hdd_cfg80211.c
index 4a9587c..784137f 100644
--- a/CORE/HDD/src/wlan_hdd_cfg80211.c
+++ b/CORE/HDD/src/wlan_hdd_cfg80211.c
@@ -8816,6 +8816,15 @@
                 }
                 StaParams.supported_channels_len = j;
             }
+            if (params->supported_oper_classes_len >
+                SIR_MAC_MAX_SUPP_OPER_CLASSES) {
+                VOS_TRACE(VOS_MODULE_ID_HDD, VOS_TRACE_LEVEL_INFO,
+                          "received oper classes:%d, resetting it to max supported %d",
+                          params->supported_oper_classes_len,
+                          SIR_MAC_MAX_SUPP_OPER_CLASSES);
+                params->supported_oper_classes_len =
+                    SIR_MAC_MAX_SUPP_OPER_CLASSES;
+            }
             vos_mem_copy(StaParams.supported_oper_classes,
                          params->supported_oper_classes,
                          params->supported_oper_classes_len);