Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c90a63c4 authored by Yu Wang's avatar Yu Wang Committed by snandini
Browse files

qcacld-3.0: fix an out-of-bounds read issue

Size of rsn_caps/mlme_ht_capabilities_info/mlme_ht_ext_cap_info are 16bit,
mlme_ht_param_info is 8bit, it casts the pointer type to (uint32_t *) to
get a 32bit value, which results in out-of-bounds read.
The fix is to cast according to the size of the original type.

CRs-Fixed: 2752734
Change-Id: I20131b8539157f30471723d7211fbf8b209c494f
parent dc1ee74e
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment