diff options
| author | Gururaj Pandurangi <panduran@codeaurora.org> | 2020-02-26 11:00:07 -0800 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2020-05-07 01:14:51 -0700 |
| commit | 3a48f1b8acb4bfaffe1248129e28ca22d51c24d9 (patch) | |
| tree | 3392fd06bf08ea99d9fa4854dd2c872ce1e3b213 | |
| parent | 7a3ebadd6b4e2ab273a5d1ea384128677ab41306 (diff) | |
qcacld-3.0: Fix while condition in rrm_fill_beacon_ies()
In function rrm_fill_beacon_ies, do while loop is checked
for BcnNumIes if it is greater than IE length 0. Fix the
check to be greater than 2 as the first two bytes is IE
header(element ID and IE length fields both 1 byte each.)
Change-Id: I11e5de481cd49a22acafee938fbe73f839f5b0e4
CRs-Fixed: 2626729
| -rw-r--r-- | core/mac/src/pe/rrm/rrm_api.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/core/mac/src/pe/rrm/rrm_api.c b/core/mac/src/pe/rrm/rrm_api.c index 5ef0a9afbb0c..fe196f7d9a90 100644 --- a/core/mac/src/pe/rrm/rrm_api.c +++ b/core/mac/src/pe/rrm/rrm_api.c @@ -746,7 +746,7 @@ rrm_fill_beacon_ies(tpAniSirGlobal pMac, pIes += sizeof(uint16_t); } - while (BcnNumIes > 0) { + while (BcnNumIes >= 2) { len = *(pBcnIes + 1); len += 2; /* element id + length. */ pe_debug("EID = %d, len = %d total = %d", |