Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit fd554918 authored by Linux Build Service Account's avatar Linux Build Service Account Committed by Gerrit - the friendly Code Review server
Browse files

Merge "qcacld-3.0: Avoid OOB read in dot11f_unpack_assoc_response" into... 

Merge "qcacld-3.0: Avoid OOB read in dot11f_unpack_assoc_response" into wlan-cld3.driver.lnx.1.1.r61-rel
parents 0ac3da58 9f6dbc2d

core/mac/src/sys/legacy/src/utils/src/dot11f.c

+1 −1
Original line number Diff line number Diff line
@@ -335,7 +335,7 @@ static uint32_t get_container_ies_len(tpAniSirGlobal pCtx, 
	len += *(pBufRemaining+1);

	pBufRemaining += len + 2;

	len += 2;

	while (len < nBuf) {

	while (len + 1 < nBuf) {

		pIe = find_ie_defn(pCtx, pBufRemaining, nBuf - len, IEs);

		if (NULL == pIe)

			break;