diff options
| author | Abhinav Kumar <abhikuma@codeaurora.org> | 2018-04-03 13:18:08 +0530 |
|---|---|---|
| committer | Abhinav Kumar <abhikuma@codeaurora.org> | 2018-04-06 00:09:57 +0530 |
| commit | b57024917779571da62da7e9247614316c7a3a93 (patch) | |
| tree | 8a3d303377e8820114d17eba0bee3c3c27af1b90 /net/lapb/lapb_timer.c | |
| parent | 6009dc565202399948b3fd95bf97cfdc7fe78b88 (diff) | |
qcacld-2.0: Fix to pass appropriate buffer length to unpack RSN IE
In lim_set_rs_nie_wp_aiefrom_sme_start_bss_req_message, length passed
to unpack RSN IE is total length of WPA and RSN IE. So if only WPA IE
is present in assoc request, the RSN IE parser will try to validate the
buffer beyond the RSN IE and might fail as the buffer belongs to WPA IE.
Pass appropriate length to unpack RSN IE.
Change-Id: Ie679e67061e7ac622e8e76b285a32135a60ca6e8
CRs-Fixed: 2217289
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions