| commit | 053efa32c85df242188c50151e6d159e1a558c6c | [log] [tgz] |
|---|---|---|
| author | Vignesh Viswanathan <viswanat@codeaurora.org> | Thu May 10 17:29:56 2018 +0530 |
| committer | nshrivas <nshrivas@codeaurora.org> | Sat May 12 08:45:28 2018 -0700 |
| tree | 35d49e50acea9fefc7aa7f5b99fc8f3f94f33bf9 | |
| parent | 39cec0833b02b0bbf81320e273ad166225d26f34 [diff] |
qcacld-3.0: Add check for min buffer length in find_ie_defn In find_ie_defn function, if the current IE is an Ext IE with EID=255, the third byte of the IE is accessed to get the extn_eid. However, if the actual buffer length is less than 3, then an OOB read would occur while trying to access extn_eid. Add check to access pbuf + 2 for extn_eid only if nbuf is greater than 2. Change-Id: Id9708176affe35a85eb21a07901ae8ed62b78b9e CRs-Fixed: 2237141