From 6f88aba6b1f81f3ce8b2020f488c110796430008 Mon Sep 17 00:00:00 2001 From: Sreelakshmi Konamki Date: Fri, 6 Jan 2017 18:10:32 +0530 Subject: qcacld-3.0: Validate no.of RIC data desctiptors before use qcacld-2.0 to qcacld-3.0 propagation Add change to validate no.of RIC data desctriptors before using it to access RICData array. Change-Id: I0ac4e9e1eb61690b3c13a74fa0edfc5af13d88c6 CRs-Fixed: 1102327 --- core/mac/src/sys/legacy/src/utils/src/parser_api.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/core/mac/src/sys/legacy/src/utils/src/parser_api.c b/core/mac/src/sys/legacy/src/utils/src/parser_api.c index 13bc578342cd..4b4fa3567867 100644 --- a/core/mac/src/sys/legacy/src/utils/src/parser_api.c +++ b/core/mac/src/sys/legacy/src/utils/src/parser_api.c @@ -1,5 +1,5 @@ /* - * Copyright (c) 2012-2016 The Linux Foundation. All rights reserved. + * Copyright (c) 2012-2017 The Linux Foundation. All rights reserved. * * Previously licensed under the ISC license by Qualcomm Atheros, Inc. * @@ -2949,7 +2949,7 @@ sir_convert_assoc_resp_frame2_struct(tpAniSirGlobal pMac, sizeof(tDot11fIEFTInfo)); } - if (ar.num_RICDataDesc) { + if (ar.num_RICDataDesc <= 2) { for (cnt = 0; cnt < ar.num_RICDataDesc; cnt++) { if (ar.RICDataDesc[cnt].present) { qdf_mem_copy(&pAssocRsp->RICData[cnt], -- cgit v1.2.3