commit 8a2516038419c68fe0124fca807de3d9d04ef6e7
author Sreelakshmi Konamki <c_skonam@qti.qualcomm.com> Fri Feb 19 16:12:23 2016 +0530
committer Satyanarayana Dash <sadash@codeaurora.org> Fri Mar 04 11:33:35 2016 +0530
tree 3a4c7997a632ea425267f6801e2004c2203aa81b
parent 041a8e9e7aa7e38c4669cd108d7e4aee5bf25450

wlan: Add presence check for structure tDot11fQosMapConfigure

qcacld-2.0 to prima propagation

Current logic use the "not present" structure tDot11fQosMapConfigure
to calculate the array index, which lead to the array overflow and
crash of VosMCThread. Add check code to avoid this problem.

Change-Id: Ifa08b24a06e409fed1bd445574127fef02f21d19
CRs-Fixed: 978582

CORE/SYS/legacy/src/utils/src/parserApi.c

diff --git a/CORE/SYS/legacy/src/utils/src/parserApi.c b/CORE/SYS/legacy/src/utils/src/parserApi.c
index 848e5f7..eb65a7d 100644
--- a/CORE/SYS/legacy/src/utils/src/parserApi.c
+++ b/CORE/SYS/legacy/src/utils/src/parserApi.c
@@ -4265,9 +4265,9 @@
     tDot11fQosMapConfigure mapConfigure;
     tANI_U32 status;
     status = dot11fUnpackQosMapConfigure(pMac, pFrame, nFrame, &mapConfigure);
-    if ( DOT11F_FAILED( status ) )
+    if ( DOT11F_FAILED( status ) || !mapConfigure.QosMapSet.present )
     {
-        dot11fLog(pMac, LOGE, FL("Failed to parse Qos Map Configure frame (0x%08x, %d bytes):"),
+        dot11fLog(pMac, LOGE, FL("Failed to parse or QosMapSet not present(0x%08x, %d bytes):"),
                   status, nFrame);
         PELOG2(sirDumpBuf(pMac, SIR_DBG_MODULE_ID, LOG2, pFrame, nFrame);)
         return eSIR_FAILURE;