Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 99190609 authored by Kiran Kumar Lokere's avatar Kiran Kumar Lokere Committed by Michael Bestas
Browse files

qcacld-5.0: Fix the possible OOB write in country IE unpack 

Fix the possible OOB write in unpacking the country IE due to
the IE length check against integer division.

CRs-Fixed: 3910626
Change-Id: I800290ab7285fb46ed43a46ce38967046b4881fa
parent 7954d11b

core/mac/src/sys/legacy/src/utils/src/dot11f.c

+1 −1
Original line number Diff line number Diff line
@@ -133,7 +133,7 @@ typedef struct sIEDefn { 
#define DOT11F_PARAMETER_CHECK2(pSrc, pBuf, nBuf, pnConsumed) \

	do { \

		if (!pSrc || IsBadReadPtr(pSrc, 4))\

			eturn DOT11F_BAD_INPUT_BUFFER; \

			return DOT11F_BAD_INPUT_BUFFER; \

		if (!pBuf || IsBadWritePtr(pBuf, nBuf))\

			return DOT11F_BAD_OUTPUT_BUFFER; \

		if (!nBuf)\