Files
android_kernel_samsung_msm8…/drivers
Pragaspathi Thilagaraj 714434efb8 wlan: Fix integer overflow in rrm_fill_beacon_ies()
In function rrm_fill_beacon_ies, the total IE length is
calculated as sum of length field of the IE and 2 (element id 1
byte and IE length field 1 byte). The total IE length is defined
of type uint16_t and will overflow if the *(pBcnIes + 1)=0xfe.
Validate the len against total IE length to avoid overflow.

Change-Id: If8f86952ce43c5923906fc6ef18705f1785c5d88
CRs-Fixed: 2617004
(cherry picked from commit 949b1745b9e1ddd8f81960723643cdf10e5f1963)
2021-10-10 23:46:47 +02:00
..
…
…
2019-08-05 09:13:25 +02:00
…
2019-08-05 14:20:47 +02:00
2021-10-10 23:46:31 +02:00
…
2019-08-05 14:20:47 +02:00
2019-08-23 13:20:00 +02:00
2019-08-05 14:20:47 +02:00
…
…
2019-08-23 13:20:00 +02:00
…
…
…
…
…
…
2019-08-08 12:10:20 +02:00