tree 3a07c94a2960cf3c304b5ebb799b0ecd8c3d4875
parent 7c47010185795e8db9c9fb2d2dbb15f1a97f6d1c
author Pragaspathi Thilagaraj <tpragasp@codeaurora.org> 1525072454 +0530
committer Karsten Tausche <karsten@fairphone.com> 1563180218 +0200

prima: Fix integer truncation in convert_wsc_opaque

Adaption from qcacld-3.0 to prima.

In the function convert_wsc_opaque, driver does copy of the
new parameters present in the additional IEs of the upstream
assoc request frame. While copy of the IE length pOld->length to
curAddIELen, possible integer truncation could occur, as the
curAddIELen is of the type uint8_t whereas pOld->length is of
type uint16_t.

Change the data type of curAddIELen to uint16_t. Make changes in
convert_p2p_opaque and convert_wfd_opaque as well.

Issue: SEC-1825
Change-Id: Ic26660fca4a02a265bfc9553b066c7ee42f1d1f4
CRs-Fixed: 2231770
Bug: 112278861
Signed-off-by: Srinivas Girigowda <sgirigow@codeaurora.org>
(adapted from commit 36e66864569d2daaa1b3f53218486dc56570c550)