qcacmn: Fix out of bound issue in util_scan_parse_mbssid()
During multiple BSSID scan ie parse, there is memory allocation on new_ie variable of size 1024 which may create buffer overflow in util_gen_new_ie() if ie length is greater than 1024. As part of fix, allocate memory of size ie length in new_ie. And also add check before copying to pos variable in util_gen_new_ie(). Change-Id: I55e0819817b5a616684067170bf28a314a145fc2 CRs-Fixed: 2867353
Loading
Please register or sign in to comment