summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAgrawal Ashish <ashishka@codeaurora.org>2016-09-16 21:57:22 +0530
committerGerrit - the friendly Code Review server <code-review@localhost>2016-09-21 17:03:21 -0700
commitafe4ca03242f81dd259fba1caeb457141fed0761 (patch)
treebcf276e100a12527cd13d7e94fb9a2c93bebaf47
parentad16bda716b4784acbb7cc9140e9cb33bd29d1b3 (diff)
qcacld-3.0: Check for max num of num_dscp_exceptions in limLogQosMapSet
qcacld-2.0 to qcacld-3.0 propagation In limLogQosMapSet, dscp_exceptions is max of 21 size but there is no limit check for num_dscp_exceptions. Check for max size for num_dscp_exceptions to avoid overflow. Change-Id: Ia1f64860f924aa0d586b2d0d532183ef9b18f2e0 CRs-Fixed: 933465
-rw-r--r--core/mac/src/sys/legacy/src/utils/src/parser_api.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/core/mac/src/sys/legacy/src/utils/src/parser_api.c b/core/mac/src/sys/legacy/src/utils/src/parser_api.c
index de0ff9b20457..fed09ba1a848 100644
--- a/core/mac/src/sys/legacy/src/utils/src/parser_api.c
+++ b/core/mac/src/sys/legacy/src/utils/src/parser_api.c
@@ -935,6 +935,8 @@ void lim_log_operating_mode(tpAniSirGlobal pMac, tDot11fIEOperatingMode *pDot11f
void lim_log_qos_map_set(tpAniSirGlobal pMac, tSirQosMapSet *pQosMapSet)
{
uint8_t i;
+ if (pQosMapSet->num_dscp_exceptions > QOS_MAP_MAX_EX)
+ pQosMapSet->num_dscp_exceptions = QOS_MAP_MAX_EX;
lim_log(pMac, LOG1, FL("num of dscp exceptions : %d"),
pQosMapSet->num_dscp_exceptions);
for (i = 0; i < pQosMapSet->num_dscp_exceptions; i++) {