| commit | 020a28b45789e7dd06fd7c0a657423f88f4e4304 | [log] [tgz] |
|---|---|---|
| author | Naveen Rawat <naveenrawat@codeaurora.org> | Thu Oct 12 12:06:03 2017 -0700 |
| committer | Karsten Tausche <karsten@fairphone.com> | Mon Jul 15 10:43:04 2019 +0200 |
| tree | 13329de4e2d77a12ae64365190f042075a1ec490 | |
| parent | d5d7a80311f994a021f92637662cef92b59cc84d [diff] |
prima: Check ie_len against 255 in function get_container_ies_len Adaption from qcacld-3.0 to prima. In function get_container_ies_len, output parameter pnConsumed is uint8_t and poses a risk of integer overflow. Check value against 255 before assigning to the output parameter. Issue: SEC-1861 Bug: 72957155 Change-Id: I6e02037952ced13de45a6c030cc5a1e85070f5cd CRs-Fixed: 2125781 (adapted from commit fbbdfacc058216c20c825899d645b403d7319b07)