Skip to content
Commit 5c4757fa authored by Jianmin Zhu's avatar Jianmin Zhu
Browse files

qcacmn: Fix OOB Read in util_gen_new_ie

In util_gen_new_ie, there is a possible out-of-bound read due to a missing
length check for extended IEs in the final pass over the copied
subelements.
Fix is to check tmp_new[1] is not zero.

Change-Id: Ic393d699a208bb54ff645bd8d2424b84becf5543
CRs-Fixed: 3924648
parent 6740e148
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment