diff options
| author | gaurank kathpalia <gkathpal@codeaurora.org> | 2018-07-12 16:00:35 +0530 |
|---|---|---|
| committer | nshrivas <nshrivas@codeaurora.org> | 2018-07-12 12:40:47 -0700 |
| commit | b990da6f9ef1f696d75ef81300ca480c8401ac40 (patch) | |
| tree | 26172ec38ba25f2ced1d0c940a836c93cc30df8d | |
| parent | 84f8cb539f7b7fc1559eec98ee0e4da9d1d67a7a (diff) | |
Revert "qcacld-3.0: Fix OOB write in lim_populate_peer_rate_set"
The driver checks the MAX Supported rates and if found
greater than MAX_RATES (12 in case of 11b/g), the driver
returns failure in populate peer rates, and sends all
rates as zero to FW in peer-assoc.
This reverts commit I75d5f5b5e7d44665101dae6e095b4adadc1781fb
Change-Id: I85d696d3de89ce4f581de7d81542603407a68e87
CRs-Fixed: 2277588
| -rw-r--r-- | core/mac/src/pe/lim/lim_assoc_utils.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/core/mac/src/pe/lim/lim_assoc_utils.c b/core/mac/src/pe/lim/lim_assoc_utils.c index 1fd6be6ca2ac..3df193015967 100644 --- a/core/mac/src/pe/lim/lim_assoc_utils.c +++ b/core/mac/src/pe/lim/lim_assoc_utils.c @@ -1685,7 +1685,7 @@ lim_populate_peer_rate_set(tpAniSirGlobal pMac, } } else tempRateSet2.numRates = 0; - if ((tempRateSet.numRates + tempRateSet2.numRates) >= + if ((tempRateSet.numRates + tempRateSet2.numRates) > SIR_MAC_RATESET_EID_MAX) { pe_err("more than 12 rates in CFG"); return eSIR_FAILURE; |