From e9fb4cef9273cdf0a063bf4522622811bea3b734 Mon Sep 17 00:00:00 2001 From: Naveen Rawat Date: Mon, 27 Jun 2016 15:36:10 -0700 Subject: [PATCH] qcacld-3.0: Fix out of bound access in wma_process_gtk_offload_req Check vdev_id against WMA_MAX_SUPPORTED_BSS instead of wma->max_bssid in function wma_process_gtk_offload_req. Change-Id: Ife4e8c907f835f766d6d44815418158cfd305343 CRs-Fixed: 1034255 --- core/wma/src/wma_features.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/wma/src/wma_features.c b/core/wma/src/wma_features.c index 32d64857daf0..79b8e3186819 100644 --- a/core/wma/src/wma_features.c +++ b/core/wma/src/wma_features.c @@ -4810,7 +4810,7 @@ QDF_STATUS wma_process_gtk_offload_req(tp_wma_handle wma, } /* Validate vdev id */ - if (vdev_id >= wma->max_bssid) { + if (vdev_id >= WMA_MAX_SUPPORTED_BSS) { WMA_LOGE("invalid vdev_id %d for %pM", vdev_id, params->bssid.bytes); status = QDF_STATUS_E_INVAL;