commit 5ed8ab66bb783475197d34d0dd2a215115872108
author Kaushik, Sushant <skaushik@qti.qualcomm.com> Wed Mar 05 11:21:11 2014 +0530
committer Kiet Lam <c_kietl@qca.qualcomm.com> Sat Mar 08 10:58:53 2014 -0800
tree 8214a8b4b23e627104529d7c2ff150631f181270
parent b8ac023cb87a9b3d34832f562dee8f305187210d

wlan : Fix static issue in csrApiRoam File.

In this issue array 'ChannelCacheStr' bound
could be exceeded.
As a part of Fix, added condition check
so that array bound is never exceeded.
Change-Id: I0d1aa2dda6c21b8ae0d6a83d46b14140c093a2f2
CRs-Fixed: 620480
(cherry picked from commit 29d130e3856095eabd4b8c4e5a4b6b04488e5a20)

CORE/SME/src/csr/csrApiRoam.c

diff --git a/CORE/SME/src/csr/csrApiRoam.c b/CORE/SME/src/csr/csrApiRoam.c
index 10fd6f1..0542fb0 100644
--- a/CORE/SME/src/csr/csrApiRoam.c
+++ b/CORE/SME/src/csr/csrApiRoam.c
@@ -16026,7 +16026,7 @@
        }
      }
 #endif
-    for (i = 0, j = 0; i < pRequestBuf->ConnectedNetwork.ChannelCount; i++)
+    for (i = 0, j = 0;j < (sizeof(ChannelCacheStr)/sizeof(ChannelCacheStr[0])) && i < pRequestBuf->ConnectedNetwork.ChannelCount; i++)
     {
             j += snprintf(ChannelCacheStr + j, sizeof(ChannelCacheStr) - j," %d",
                           pRequestBuf->ConnectedNetwork.ChannelCache[i]);