diff options
| author | Paul Zhang <paulz@codeaurora.org> | 2018-09-17 18:02:11 +0800 |
|---|---|---|
| committer | Paul Zhang <paulz@codeaurora.org> | 2018-09-17 18:02:11 +0800 |
| commit | 5e3a3f96406a838a267ce357430b5356120be862 (patch) | |
| tree | 9979463707ff1ce527d17af0b215794dea8c1f0d /tools/perf/scripts/python | |
| parent | da29ebb2754677bdd480ad2f0ee341bb0d31a1b4 (diff) | |
qcacld-2.0: Increase size of MAX_WPA_RSN_IE_LEN in wlan_hdd_cfg80211_set_ie
In function wlan_hdd_cfg80211_set_ie, RSN IE is parsed and copied
into the buffer pWextState->WPARSNIE for length eLen + 2.
However, the buffer WPARSNIE is allocated only for MAX_WPA_RSN_IE_LEN
size. If eLen + 2 is greater than MAX_WPA_RSN_IE_LEN, a buffer overflow
would occur.
Increase the size of MAX_WPA_RSN_IE_LEN to 255 as per the spec
Change-Id: Ibf44e8dc1010e6e32b2262357d3aa180926d5c99
CRs-Fixed: 2316553
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions