commit 2f5dd65e9b2a88be343565200cf41fa5d0b8034e
author Masti, Narayanraddi <c_nmasti@qti.qualcomm.com> Tue Mar 03 22:00:44 2015 +0530
committer Satyanarayana Dash <c_sadash@qti.qualcomm.com> Wed Mar 04 20:43:26 2015 +0530
tree 0455c39f130c5756d8e596c25f5d239c787d65c6
parent 32bf8630d54964bc8034556113b4b148fe5d48c3

prima: KW issue: Array Index Out of Bounds

Fix below buffer overflow issues

1.Ensure to validate index  value not to be greater than or
equal to maximum 11a and 11b rates in limTdlsPopulateMatchingRateSet
API.

2.Ensure to validate index value to be less than maximum band in
PopulateDot11fTdlsOffchannelParams API.

3.Ensure to validate index value to be less than maximum channels
in limSendHT40OBSSScanInd API.

Change-Id: I80d8a42057013b6212e40ba985f1a181b746fbd9
CRs-Fixed: 801811

CORE/MAC/src/pe/lim/limUtils.h

diff --git a/CORE/MAC/src/pe/lim/limUtils.h b/CORE/MAC/src/pe/lim/limUtils.h
index c4382b0..9d2eff2 100644
--- a/CORE/MAC/src/pe/lim/limUtils.h
+++ b/CORE/MAC/src/pe/lim/limUtils.h
@@ -61,6 +61,8 @@
 #define LIM_MAX_REASSOC_RETRY_LIMIT            2
 #endif
 
+#define LIM_MAX_BANDS ( 48 )
+
 // classifier ID is coded as 0-3: tsid, 4-5:direction
 #define LIM_MAKE_CLSID(tsid, dir) (((tsid) & 0x0F) | (((dir) & 0x03) << 4))