commit | 4c0f2c3c6f394162fdb98f5e20dec346e8f4cfdc | [log] [tgz] |
---|---|---|
author | Srinivas Girigowda <sgirigow@codeaurora.org> | Mon Dec 12 18:45:32 2016 -0800 |
committer | chrmhoffmann <chrmhoffmann@gmail.com> | Sun Jun 25 21:26:25 2017 +0200 |
tree | 48b0c1fab6303fb2ebc3b5fc25c5c4ee25396a1a | |
parent | e3955a43a9f7fc0a8b378988505e75557ed34c65 [diff] |
prima: Fix array out-of-bounds & integer underflow in _iw_set_genie 'wrqu->data.length' holds the total number of IE data buffer. Add a check to make sure the number of remaining data to be read is greater than or equal to IE length. Also, advance the buffer pointer to point to the next element only if next element is present. Change-Id: Ic60f3e0650f365955dab4099eb8740e9789e00cc CRs-Fixed: 1100132