qcacld-2.0: Check for minimum frameLen for action frames
Propagation to pronoto from cld2.0. In limProcessActionFrame and limProcessActionFrameNoSession, The Rx frame pointer is directly casted to the action frame header to find the Action frame category and action ID without validating the minimum length of the frame. If the frame len is less than the action frame header len, then OOB read would occur. Check if frame_len is less than the size of action frame header len and return if true. Change-Id: Idf8ca7eeacdf57171d2850fe6317784911830aac CRs-Fixed: 2598901
Loading
Please register or sign in to comment