tree 31419a26a3459effbd8e3eb526c0075afcb33279
parent 1f62b8bc5bfa27e1cdb75b21d5a4601b517fc66a
author Pragaspathi Thilagaraj <tpragasp@codeaurora.org> 1558962326 +0530
committer Pragaspathi Thilagaraj <tpragasp@codeaurora.org> 1559307184 +0530

wlan: Fix possible integer underflow in cfg80211_rx_mgmt

In the function cfg80211_rx_mgmt, data_len is calculated as
len - ieee80211_hdrlen(mgmt->frame_control). Len is not
validated before this calculation. So a possible integer
underflow will occur if len value is less than the value of
ieee80211_hdrlen(mgmt->frame_control).

Validate the value of len against
ieee80211_hdrlen(mgmt->frame_control) in the caller.

Change-Id: Iae776daf37b0c052bd4ce4da44ea728d121eae51
CRs-Fixed: 2460252