wlan: Increase size of MAX_WPA_RSN_IE_LEN in wlan_hdd_cfg80211_set_ie
In function wlan_hdd_cfg80211_set_ie, RSN IE is parsed and copied into the buffer pWextState->WPARSNIE for length eLen + 2. However, the buffer WPARSNIE is allocated only for MAX_WPA_RSN_IE_LEN size. If eLen + 2 is greater than MAX_WPA_RSN_IE_LEN, a buffer overflow would occur. Increase the size of MAX_WPA_RSN_IE_LEN to 255 as per the spec Change-Id: Ibf44e8dc1010e6e32b2262357d3aa180926d5c99 CRs-Fixed: 2299183
Loading
Please register or sign in to comment