tree 1911eb0e1a597a2bc242c2b1e300b9c8faa73dc3
parent a3a3f4102269e0dfdd3e801305eaa613c087acfc
author sheenam monga <shebala@codeaurora.org> 1578649751 +0530
committer Gerrit - the friendly Code Review server <code-review@localhost> 1580287534 -0800

qcacld-2.0: Check for minimum frameLen for action frames

Propagation to pronoto from cld2.0.

In limProcessActionFrame and limProcessActionFrameNoSession,
The Rx frame pointer is directly casted to the action frame header
to find the Action frame category and action ID without validating
the minimum length of the frame. If the frame len is less than the
action frame header len, then OOB read would occur.

Check if frame_len is less than the size of action frame header len
and return if true.

Change-Id: Idf8ca7eeacdf57171d2850fe6317784911830aac
CRs-Fixed: 2598901