commit 51b6778370a7bfde4c6afcde409821de5d046ef4
author Jeff Johnson <jjohnson@qca.qualcomm.com> Fri Apr 05 12:35:41 2013 -0700
committer Gopichand Nakkala <gnakkala@qca.qualcomm.com> Tue Apr 09 14:46:10 2013 -0700
tree 2cc2450ed8dbe53a3cf7333c3651c1e88f3dd28b
parent 6a81ca469d7570251bae32df008bccc1b7329433

wlan: Avoid overrun when processing GETROAMSCANCHANNELS

Static source code analysis indicated that hdd_ioctl(), when
processing the "GETROAMSCANCHANNELS" command, may use index value(s)
128..255 on array 'extra' of size 128.  Due to the data involved this
is probably a "false positive" but it is easy to suppress the warning
by changing the declaration of 'len' from u8 to int, so change the
declaration.

Change-Id: I9529a6d81f779aeebd928a5c8db91de8cc80ae48
CRs-fixed: 470188

CORE/HDD/src/wlan_hdd_main.c

diff --git a/CORE/HDD/src/wlan_hdd_main.c b/CORE/HDD/src/wlan_hdd_main.c
index 7f497cd..178a233 100644
--- a/CORE/HDD/src/wlan_hdd_main.c
+++ b/CORE/HDD/src/wlan_hdd_main.c
@@ -889,8 +889,9 @@
        {
            tANI_U8 ChannelList[WNI_CFG_VALID_CHANNEL_LIST_LEN] = {0};
            tANI_U8 numChannels = 0;
-           tANI_U8 len = 0, j = 0;
+           tANI_U8 j = 0;
            char extra[128] = {0};
+           int len;
 
            if (eHAL_STATUS_SUCCESS != sme_getRoamScanChannelList( (tHalHandle)(pHddCtx->hHal),
                                               ChannelList, &numChannels ))