commit 2cc8a8cc51a57560c8e4527cc62ffeade38437e4
author CNSS_WLAN Service <cnssbldsw@qualcomm.com> Sat Apr 13 11:18:24 2019 -0700
committer Gerrit - the friendly Code Review server <code-review@localhost> Sat Apr 13 11:18:24 2019 -0700
tree 1cbcee094761203663b8e4faf29d2429f164d1a1
parent 9d15b3a4446ed50cc952a89d89148373c7b9c50b
parent decc73bfa8239a2014976665ba99de4a6ccb7435

Merge "wlan: Fix possible OOB in lim_chk_n_process_wpa_rsn_ie" into wlan-driver.lnx.1.0

CORE/MAC/src/pe/lim/limProcessAssocReqFrame.c

diff --git a/CORE/MAC/src/pe/lim/limProcessAssocReqFrame.c b/CORE/MAC/src/pe/lim/limProcessAssocReqFrame.c
index 427300d..06a4c0f 100644
--- a/CORE/MAC/src/pe/lim/limProcessAssocReqFrame.c
+++ b/CORE/MAC/src/pe/lim/limProcessAssocReqFrame.c
@@ -783,7 +783,7 @@
                 {
                     if (dot11fUnpackIeWPA(pMac,
                                         &pAssocReq->wpa.info[4], //OUI is not taken care
-                                        pAssocReq->wpa.length, 
+                                        (pAssocReq->wpa.length - 4),
                                         &Dot11fIEWPA) != DOT11F_PARSE_SUCCESS)
                     {
                         limLog(pMac, LOGE, FL("Invalid WPA IE"));