tree a6fe9bc79b5e31ecb605757235732b47c342af3c
parent 1a99fe0842794fb9b92a50b40a054401ab26f803
author Vignesh Viswanathan <viswanat@codeaurora.org> 1506591338 +0530
committer Nandini Suresh <snandini@codeaurora.org> 1507842162 -0700

qcacld-3.0: Avoid integer overflow in wma_ndp_end_indication_event_handler

In function wma_ndp_end_indication_event_handler, num_ndp_end_indication_list
from the fw is used to calculate buf_size which is in turn used to malloc.
This could lead to potential integer overflow if num_ndp_end_indication_list
is a very high value.

Add check to validate num_ndp_end_indication_list does not exceed the max
message size from firmware.

Change-Id: Icbb763bfc14ec0ef8424cab50afa5c6826fd3c60
CRs-Fixed: 2114255