diff options
| -rw-r--r-- | core/hdd/src/wlan_hdd_ftm.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/core/hdd/src/wlan_hdd_ftm.c b/core/hdd/src/wlan_hdd_ftm.c index 62f6ebf730d2..daca6641c2dd 100644 --- a/core/hdd/src/wlan_hdd_ftm.c +++ b/core/hdd/src/wlan_hdd_ftm.c @@ -333,6 +333,9 @@ static void wlanqcmbr_mc_process_msg(void *message) uint32_t data_len; data_len = *((uint32_t *) message) + sizeof(uint32_t); + if (data_len > MAX_UTF_LENGTH + 4) + return; + qcmbr_buf = qdf_mem_malloc(sizeof(qcmbr_queue_t)); if (qcmbr_buf != NULL) { memcpy(qcmbr_buf->utf_buf, message, data_len); |