qcacmn: Add length checks for noninheritance_ie
In util_scan_find_noninheritance_ie API, ies[ELEM_ID_EXTN_POS] may lead to OOB access if len==MIN_IE_LEN. util_parse_noninheritance_list may lead to OOB read access extn_elem[ELEM_ID_LIST_LEN_POS] Fix is to add length checks and add sub_copy and length subie_len checks before accessing extn_elem to avoid any OOB read. Change-Id: I7758c6e4d8d568a5050011603b48a23e0b11da94 CRs-Fixed: 3717569
Loading
Please register or sign in to comment