Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit aab3fa66 authored by Sheenam Monga's avatar Sheenam Monga Committed by Ravindra Konda
Browse files

qcacmn: Add length checks for noninheritance_ie

In util_scan_find_noninheritance_ie API,
ies[ELEM_ID_EXTN_POS] may lead to OOB access if
len==MIN_IE_LEN.

util_parse_noninheritance_list may lead to OOB
read access extn_elem[ELEM_ID_LIST_LEN_POS]

Fix is to add length checks and add sub_copy and length
subie_len checks before accessing extn_elem to avoid any
OOB read.

Change-Id: I7758c6e4d8d568a5050011603b48a23e0b11da94
CRs-Fixed: 3717569
parent f363c910
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment