From 69e72bd66aa4a3035dbf8fb8d62c68b9d0525f21 Mon Sep 17 00:00:00 2001 From: Ashish Kumar Dhanotiya Date: Mon, 26 Mar 2018 20:30:32 +0530 Subject: [PATCH] qcacld-3.0: Remove CSR dot11f IE RSN max len Max len of CSR_DOT11F_IE_RSN is 114 which is les than the DOT11F_IE_RSN_MAX_LEN (130) which may result in array overflow while parsing cckm ie. TO address this replace CSR_DOT11F_IE_RSN_MAX_LEN to with DOT11F_IE_RSN_MAX_LEN and remove CSR_DOT11F_IE_RSN_MAX_LEN as it is not getting used anywhere else. Change-Id: I58f93f37bd17653db2840720ab106c01f10d535e CRs-Fixed: 2209355 --- core/sme/inc/csr_api.h | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/core/sme/inc/csr_api.h b/core/sme/inc/csr_api.h index e09c4c5835be..706ef4e0684c 100644 --- a/core/sme/inc/csr_api.h +++ b/core/sme/inc/csr_api.h @@ -304,9 +304,8 @@ typedef struct tagCsrEseCckmInfo { #endif } tCsrEseCckmInfo; -#define CSR_DOT11F_IE_RSN_MAX_LEN (114) typedef struct tagCsrEseCckmIe { - uint8_t cckmIe[CSR_DOT11F_IE_RSN_MAX_LEN]; + uint8_t cckmIe[DOT11F_IE_RSN_MAX_LEN]; uint8_t cckmIeLen; } tCsrEseCckmIe; #endif /* FEATURE_WLAN_ESE */