Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit adfeda02 authored by Ashish Kumar Dhanotiya's avatar Ashish Kumar Dhanotiya
Browse files

wlan: Remove CSR dot11f IE RSN max len 

Max len of CSR_DOT11F_IE_RSN is 114 which is les than the
DOT11F_IE_RSN_MAX_LEN (130) which may result in array overflow
while parsing cckm ie.
TO address this replace CSR_DOT11F_IE_RSN_MAX_LEN to with
DOT11F_IE_RSN_MAX_LEN and remove CSR_DOT11F_IE_RSN_MAX_LEN
as it is not getting used anywhere else.

Change-Id: I58f93f37bd17653db2840720ab106c01f10d535e
CRs-Fixed: 2566108
parent f950e558

CORE/SME/inc/csrApi.h

+1 −2
Original line number Diff line number Diff line
@@ -365,11 +365,10 @@ typedef struct tagCsrEseCckmInfo 
#endif



#if defined(FEATURE_WLAN_ESE) && defined(FEATURE_WLAN_ESE_UPLOAD)

#define CSR_DOT11F_IE_RSN_MAX_LEN   (114)  /*TODO: duplicate one in dot11f.h */



typedef struct tagCsrEseCckmIe

{

    tANI_U8 cckmIe[CSR_DOT11F_IE_RSN_MAX_LEN];

    tANI_U8 cckmIe[DOT11F_IE_RSN_MAX_LEN];

    tANI_U8 cckmIeLen;

} tCsrEseCckmIe;

#endif /* FEATURE_WLAN_ESE && FEATURE_WLAN_ESE_UPLOAD */