tree 7e4b51ba55d93a22fff929fba72579ff3f1d9c50
parent 291b85c5e9e0ed6b2a98cca1700bcb13cbdc3563
author Ashish Kumar Dhanotiya <adhanoti@codeaurora.org> 1497941013 +0530
committer Gerrit - the friendly Code Review server <code-review@localhost> 1499260609 -0700

wlan: Avoid extscan bucket spec overread

Propagation from qcacld-2.0 to prima.

Currently in hdd_extscan_start_fill_bucket_channel_spec() the
QCA_WLAN_VENDOR_ATTR_EXTSCAN_BUCKET_SPEC attribute is parsed without
specifying a policy. This means that no policy is enforced.
Subsequently the values of the nested attributes are retrieved, but
again without any length limits enforced. This could result in a
buffer overread.
To prevent this issue:
* Parse using the existing policy wlan_hdd_extscan_config_policy
* Update the policy to add missing attributes

Change-Id: I3b20cb28d1beccd2e804b022b531413ad1edb533
CRs-Fixed: 2058442