qcacld-2.0: OOB read while processing extscan change results

Propagation from qcacld-3.0 to qcacld-2.0

In function wma_extscan_change_results_event_handler(), numResults
in dest_chglist is assigning as total_entries in the event, but the
memory allocated to dest_chglist is based on the numap variable,
which may cause out of buffer read in extscan indication callback
function wlan_hdd_cfg80211_extscan_signif_wifi_change_results_ind().
Also tSirWifiSignificantChange array parsing in both the functions
is not efficient which may lead to accessing unallocated memory.
To address out of buffer read, assign numap to numResults in
dest_chglist and to address accessing of unallocated memory,
parse tSirWifiSignificantChange array with efficient logic.

Change-Id: I469405d68cf075e58aa3a17e884032882a595b18
CRs-Fixed: 2275630

0 files changed, 0 insertions, 0 deletions