diff options
| author | Ashish Kumar Dhanotiya <adhanoti@codeaurora.org> | 2018-03-26 20:30:32 +0530 |
|---|---|---|
| committer | nshrivas <nshrivas@codeaurora.org> | 2018-04-05 03:18:20 -0700 |
| commit | 5d150dcd50383f0ab71792cf0717a3b75220d6c8 (patch) | |
| tree | 1b51a11c927e0219a8f0677cac768295a4f3c799 | |
| parent | a4affda508949a973b1f0f6d6bbadd9756b16c89 (diff) | |
qcacld-3.0: Remove CSR dot11f IE RSN max len
Max len of CSR_DOT11F_IE_RSN is 114 which is les than the
DOT11F_IE_RSN_MAX_LEN (130) which may result in array overflow
while parsing cckm ie.
TO address this replace CSR_DOT11F_IE_RSN_MAX_LEN to with
DOT11F_IE_RSN_MAX_LEN and remove CSR_DOT11F_IE_RSN_MAX_LEN
as it is not getting used anywhere else.
Change-Id: I58f93f37bd17653db2840720ab106c01f10d535e
CRs-Fixed: 2209355
| -rw-r--r-- | core/sme/inc/csr_api.h | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/core/sme/inc/csr_api.h b/core/sme/inc/csr_api.h index 6c94b4e1d354..6b1530aad3e8 100644 --- a/core/sme/inc/csr_api.h +++ b/core/sme/inc/csr_api.h @@ -364,9 +364,8 @@ typedef struct tagCsrEseCckmInfo { #endif } tCsrEseCckmInfo; -#define CSR_DOT11F_IE_RSN_MAX_LEN (114) typedef struct tagCsrEseCckmIe { - uint8_t cckmIe[CSR_DOT11F_IE_RSN_MAX_LEN]; + uint8_t cckmIe[DOT11F_IE_RSN_MAX_LEN]; uint8_t cckmIeLen; } tCsrEseCckmIe; #endif /* FEATURE_WLAN_ESE */ |