qcacld-2.0: Fix out-of-bounds access in limProcessAssocReqFrame

Propagation from cld3.0 to cld2.0.

Currently the function limProcessAssocReqFrame uses framelen
without validation to parse the IE buffer which could lead to
out-of-bounds memory access if the framelen is less than or
equal to LIM_ASSOC_REQ_IE_OFFSET(4).

Add check to validate the frame_len with LIM_ASSOC_REQ_IE_OFFSET
before sending frame_len - LIM_ASSOC_REQ_IE_OFFSET  to
cfg_get_vendor_ie_ptr_from_oui to parse the only IE buffer.

Change-Id: Iaa9e8db4a2605169c9ad3904878a2e626eb6de8b
CRs-Fixed: 2333905

0 files changed, 0 insertions, 0 deletions