commit e8df7e548df3a8eef1575ada58345176b72d6696
author CNSS_WLAN Service <cnssbldsw@qualcomm.com> Fri May 10 08:28:41 2019 -0700
committer Gerrit - the friendly Code Review server <code-review@localhost> Fri May 10 08:28:41 2019 -0700
tree c94131540c19c05fe7d9644d9fc20fbaf1afc4ac
parent 3dc4c971783a459f64720fa9a3791351bb3e18c8
parent 591443266a84cd13e5dfdfe8d4d81bbdc6b7530f

Merge "wlan: Fix possible buffer overflow in sirConvertAddtsRsp2Struct" into wlan-driver.lnx.1.0

CORE/SYS/legacy/src/utils/src/parserApi.c

diff --git a/CORE/SYS/legacy/src/utils/src/parserApi.c b/CORE/SYS/legacy/src/utils/src/parserApi.c
index 3c6111f..66fffcf 100644
--- a/CORE/SYS/legacy/src/utils/src/parserApi.c
+++ b/CORE/SYS/legacy/src/utils/src/parserApi.c
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2012-2018 The Linux Foundation. All rights reserved.
+ * Copyright (c) 2012-2019 The Linux Foundation. All rights reserved.
  *
  * Previously licensed under the ISC license by Qualcomm Atheros, Inc.
  *
@@ -4030,7 +4030,7 @@
         if ( addts.num_WMMTCLAS )
         {
             j = (tANI_U8)(pAddTs->numTclas + addts.num_WMMTCLAS);
-            if ( SIR_MAC_TCLASIE_MAXNUM > j ) j = SIR_MAC_TCLASIE_MAXNUM;
+            if ( SIR_MAC_TCLASIE_MAXNUM < j ) j = SIR_MAC_TCLASIE_MAXNUM;
 
             for ( i = pAddTs->numTclas; i < j; ++i )
             {
@@ -4212,7 +4212,7 @@
         if ( addts.num_WMMTCLAS )
         {
             j = (tANI_U8)(pAddTs->numTclas + addts.num_WMMTCLAS);
-            if ( SIR_MAC_TCLASIE_MAXNUM > j ) j = SIR_MAC_TCLASIE_MAXNUM;
+            if ( SIR_MAC_TCLASIE_MAXNUM < j ) j = SIR_MAC_TCLASIE_MAXNUM;
 
             for ( i = pAddTs->numTclas; i < j; ++i )
             {