A-Team_Digital_Solutions/android_kernel_motorola_sm6375
Watch
2
0
Fork
You've already forked android_kernel_motorola_sm6375
 0
mirror of https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git synced 2026-10-13 16:16:15 -04:00
Code Issues Projects Releases Packages Wiki Activity

qcacld-3.0: Validate 'num_RICDataDesc' to avoid error logs

Browse source 
qcacld-2.0 to qcacld-3.0 propagation

In sir_convert_assoc_resp_frame2_struct(), 'pAssocRsp->ricPresent' is set to
true when 'num_RICDataDesc' is 0, this causes qdf_mem_malloc() to be called
with invalid length 0.

Add change to validate 'num_RICDataDesc' to avoid above issue.

Change-Id: If5e59477efa4df01ca216904645babf769b55c47
CRs-Fixed: 2078891
This commit is contained in:
Sreelakshmi Konamki 2017-07-24 18:53:48 +05:30 • committed by snandini
commit 0ac62e88ee
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
core/mac/src/sys/legacy/src/utils/src/parser_api.c
View file

@ -2874,7 +2874,7 @@ sir_convert_assoc_resp_frame2_struct(tpAniSirGlobal pMac,
sizeof(tDot11fIEFTInfo));
}
if (ar.num_RICDataDesc <= 2) {
if (ar.num_RICDataDesc && ar.num_RICDataDesc <= 2) {
for (cnt = 0; cnt < ar.num_RICDataDesc; cnt++) {
if (ar.RICDataDesc[cnt].present) {
qdf_mem_copy(&pAssocRsp->RICData[cnt],