tree f1787e0d912a80ce1a5ea628cf8ba0a43191466d
parent 517d0f930bd1fbc39021df604865cfe8d90c06e7
author sheenam monga <shebala@codeaurora.org> 1583921079 +0530
committer Gerrit - the friendly Code Review server <code-review@localhost> 1587541075 -0700

wlan: check BcnNumIes against size of header instead of 0

Currently, for while loop BcnNumIes is checked against 0
which may cause OOB read for len = *(pBcnIes + 1).

Fix is to check BcnNumIes against size of header i.e 2 instead
of 0 to avoid 00B read.

Change-Id: Id167410da790e449d36853d8505142e1b218e9b8
CRs-Fixed: 2635666