diff options
| author | Kiran Kumar Lokere <quic_klokere@quicinc.com> | 2024-09-09 16:07:29 -0700 |
|---|---|---|
| committer | Michael Bestas <mkbestas@lineageos.org> | 2025-03-13 02:56:20 +0200 |
| commit | cf7420326fc9659917177acb536a2a9a8bf65bfc (patch) | |
| tree | 8563b6bb02feb8cfdee8f8e6505136e3980fe801 | |
| parent | 2c19df08b06485eb00b5882684120a596d4c9113 (diff) | |
Fix the possible OOB write in unpacking the country IE due to
the IE length check against integer division.
CRs-Fixed: 3910626
Change-Id: I800290ab7285fb46ed43a46ce38967046b4881fa
| -rw-r--r-- | drivers/staging/qcacld-3.0/core/mac/src/sys/legacy/src/utils/src/dot11f.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/staging/qcacld-3.0/core/mac/src/sys/legacy/src/utils/src/dot11f.c b/drivers/staging/qcacld-3.0/core/mac/src/sys/legacy/src/utils/src/dot11f.c index 335a80e81f44..a1c81496596c 100644 --- a/drivers/staging/qcacld-3.0/core/mac/src/sys/legacy/src/utils/src/dot11f.c +++ b/drivers/staging/qcacld-3.0/core/mac/src/sys/legacy/src/utils/src/dot11f.c @@ -142,7 +142,7 @@ typedef struct sIEDefn { #define DOT11F_PARAMETER_CHECK2(pSrc, pBuf, nBuf, pnConsumed) \ do { \ if (!pSrc || IsBadReadPtr(pSrc, 4))\ - eturn DOT11F_BAD_INPUT_BUFFER; \ + return DOT11F_BAD_INPUT_BUFFER; \ if (!pBuf || IsBadWritePtr(pBuf, nBuf))\ return DOT11F_BAD_OUTPUT_BUFFER; \ if (!nBuf)\ |