| commit | 05b8caf6153aea28e821095dbe8c4d192065584d | [log] [tgz] |
|---|---|---|
| author | Gururaj Pandurangi <panduran@codeaurora.org> | Wed Oct 27 12:02:58 2021 -0700 |
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | Tue Nov 09 03:10:13 2021 -0800 |
| tree | 80926c995d3d73e4c63094494fc8a25d7a39b63a | |
| parent | 4fbc8ed3ef8d67b3124aaf80e616583ff2043021 [diff] |
wlan: Avoid OOB read in dot11f_unpack_assoc_response Avoid OOB read in dot11f_unpack_assoc_response API. Modify the check to nBuf-len > 1 to read another byte of pBufRemaining. This ensures a read of at least 2 bytes since all IEs have at least 2 bytes. Change-Id: If8f43739091b1baa8a86751fa60b9af2a90a751a CRs-Fixed: 3064612