| commit | e27e355c567774d772388a2ff17e34929a9c56d0 | [log] [tgz] |
|---|---|---|
| author | gaurank kathpalia <gkathpal@codeaurora.org> | Tue Aug 14 17:39:48 2018 +0530 |
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | Sat Aug 18 01:13:07 2018 -0700 |
| tree | 1cf728aa181540580bb95e9ae11369977ab43914 | |
| parent | f1128f1304e5804123018f2b49201ad97aac9acc [diff] |
wlan: Increase size of MAX_WPA_RSN_IE_LEN in wlan_hdd_cfg80211_set_ie In function wlan_hdd_cfg80211_set_ie, RSN IE is parsed and copied into the buffer pWextState->WPARSNIE for length eLen + 2. However, the buffer WPARSNIE is allocated only for MAX_WPA_RSN_IE_LEN size. If eLen + 2 is greater than MAX_WPA_RSN_IE_LEN, a buffer overflow would occur. Increase the size of MAX_WPA_RSN_IE_LEN to 255 as per the spec Change-Id: Ibf44e8dc1010e6e32b2262357d3aa180926d5c99 CRs-Fixed: 2299183