commit a328bcdae8a8241e3b1211409584afaf2fd8b0da
author Kiran Kumar Lokere <c_kloker@qca.qualcomm.com> Mon Apr 22 22:02:05 2013 -0700
committer Gopichand Nakkala <gnakkala@qca.qualcomm.com> Thu May 02 06:18:40 2013 -0700
tree 401350932de82fbe5a9dbc0f80d509cf5f5caf0f
parent 7faf58c2bc3b64f9da0337d4cf9ae8383459a8a6

Fix issues found in static source code analysis.

Resolve the generic issues found in static source code analysis.

Change-Id: I235fff9fdfeb91f3350e39ac145c1c8f5461c0f2

CORE/MAC/src/pe/lim/limSmeReqUtils.c

diff --git a/CORE/MAC/src/pe/lim/limSmeReqUtils.c b/CORE/MAC/src/pe/lim/limSmeReqUtils.c
index 73cc42e..f7f8f5a 100644
--- a/CORE/MAC/src/pe/lim/limSmeReqUtils.c
+++ b/CORE/MAC/src/pe/lim/limSmeReqUtils.c
@@ -155,7 +155,8 @@
                 // Check validity of WPA IE
                 if (SIR_MAC_MAX_IE_LENGTH > startPos)
                 {
-                    val = sirReadU32((tANI_U8 *) &pRSNie->rsnIEdata[startPos + 2]);
+                    if (startPos <= (SIR_MAC_MAX_IE_LENGTH - sizeof(tANI_U32)))
+                        val = sirReadU32((tANI_U8 *) &pRSNie->rsnIEdata[startPos + 2]);
                     if((pRSNie->rsnIEdata[startPos + 1] < DOT11F_IE_WPA_MIN_LEN) ||
                         (pRSNie->rsnIEdata[startPos + 1] > DOT11F_IE_WPA_MAX_LEN) ||
                         (SIR_MAC_WPA_OUI != val))