| commit | eb9c2e43dbd32a78eb86087dccbd61249a44a1ef | [log] [tgz] |
|---|---|---|
| author | Gururaj Pandurangi <panduran@codeaurora.org> | Wed Oct 27 12:02:58 2021 -0700 |
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | Wed Dec 01 03:23:12 2021 -0800 |
| tree | 82af85ad63be0d6ba2ce8c1aca2c6294e6875699 | |
| parent | 1805c11c64d9f0060c015246cf997cf210c2f113 [diff] |
wlan: Avoid OOB read in dot11f_unpack_assoc_response Avoid OOB read in dot11f_unpack_assoc_response API. Modify the check to nBuf-len > 1 to read another byte of pBufRemaining. This ensures a read of at least 2 bytes since all IEs have at least 2 bytes. Change-Id: If8f43739091b1baa8a86751fa60b9af2a90a751a CRs-Fixed: 3064612