commit 13e8008e6073c08d5581be067fb2b8a95dd7f6e5
author Padma, Santhosh Kumar <skpadma@codeaurora.org> Wed Jul 19 12:56:53 2017 +0530
committer Padma, Santhosh Kumar <skpadma@codeaurora.org> Fri Aug 18 15:30:31 2017 +0530
tree 2d7c6d342fcf3ee6be87c866b09efad4c3eeaf6c
parent e6d9046b88564a47f65deb069d9b85dddca88a03

wlan: Validate 'num_RICDataDesc' to avoid error logs

In sirConvertAssocRespFrame2Struct(), 'pAssocRsp->ricPresent' is set to
true when 'num_RICDataDesc' is 0, this causes vos_mem_malloc() to be called
with invalid length 0.

Add change to validate 'num_RICDataDesc' to avoid above issue.

Change-Id: If5e59477efa4df01ca216904645babf769b55c47
CRs-Fixed: 2078891

CORE/SYS/legacy/src/utils/src/parserApi.c

diff --git a/CORE/SYS/legacy/src/utils/src/parserApi.c b/CORE/SYS/legacy/src/utils/src/parserApi.c
index 28d8575..5544f3f 100644
--- a/CORE/SYS/legacy/src/utils/src/parserApi.c
+++ b/CORE/SYS/legacy/src/utils/src/parserApi.c
@@ -2741,7 +2741,7 @@
 #endif
 
 #ifdef WLAN_FEATURE_VOWIFI_11R
-    if (ar.num_RICDataDesc <= 2) {
+    if (ar.num_RICDataDesc && ar.num_RICDataDesc <= 2) {
         for (cnt=0; cnt < ar.num_RICDataDesc; cnt++) {
             if (ar.RICDataDesc[cnt].present) {
                 vos_mem_copy( &pAssocRsp->RICData[cnt], &ar.RICDataDesc[cnt],