diff options
| author | Sreelakshmi Konamki <c_skonam@qti.qualcomm.com> | 2016-02-02 12:04:23 +0530 |
|---|---|---|
| committer | Anjaneedevi Kapparapu <akappa@codeaurora.org> | 2016-02-02 16:20:15 +0530 |
| commit | 06a4eaf33bfc0d9e9386696f424bd8b91c1076cc (patch) | |
| tree | 18ef1d7ac3c068239efe2b72f051d01e8db4cbfc | |
| parent | fc69aba6bebd88f21974660fadd0281047d79a33 (diff) | |
qcacld-2.0: Fix memory overwrite in struct sSirSmeJoinRsp
struct sSirSmeJoinRsp has member 'supported_nss_1x1' after 'frames'
which causes memory corruption.
Move 'supported_nss_1x1' before 'frames' to avoid memory corruption.
Change-Id: I0fe37440070960f6cfed751efaa75ece80dceaf6
CRs-Fixed: 970717
| -rw-r--r-- | CORE/MAC/inc/sirApi.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/CORE/MAC/inc/sirApi.h b/CORE/MAC/inc/sirApi.h index 494812636907..abb128253a2f 100644 --- a/CORE/MAC/inc/sirApi.h +++ b/CORE/MAC/inc/sirApi.h @@ -1166,8 +1166,9 @@ typedef struct sSirSmeJoinRsp tSirSmeHTProfile HTProfile; #endif - tANI_U8 frames[ 1 ]; bool supported_nss_1x1; + /* Add new members before 'frames' to avoid memory corruption of 'frames' */ + tANI_U8 frames[ 1 ]; } tSirSmeJoinRsp, *tpSirSmeJoinRsp; /// Definition for Authentication indication from peer |