Sheenam Monga
1845102b9f
BACKPORT: qcacmn: Fix potential OOB read in util_scan_parse_rnr_ie
...
Currently, while parsing scan RNR Ie data is moved to
next neighbor_ap_info_field after parsing the current
neighbor_ap_info_field. But in last iteration pointer may
try to access invalid data if (uint8_t *)ie + rnr_ie_len + 2)
bytes are less than sizeof neighbor_ap_info_field and same
is the case with tbtt_length access.
Fix is to add a length check of data + next data size to be parsed
< (uint8_t *)ie + rnr_ie_len + 2) instead of adding a validation
of data length only.
CRs-Fixed: 3710080
Change-Id: I05e5a9a02f0f4f9bc468db894588e676f0a248c0
2024-09-01 17:46:49 +03:00
..
2024-08-11 18:42:43 +03:00
2023-09-23 10:46:59 +02:00
2024-08-03 16:41:23 +03:00
2024-08-11 18:42:43 +03:00
2024-03-26 18:32:22 +02:00
2024-08-12 21:00:35 +03:00
2024-08-11 18:42:43 +03:00
2024-06-04 17:31:52 +02:00
2024-04-21 22:19:28 +03:00
2024-08-11 18:42:43 +03:00
2024-06-04 17:31:52 +02:00
2023-12-02 18:01:02 +02:00
2024-08-23 18:51:48 +03:00
2024-08-11 17:30:18 +03:00
2024-08-11 18:42:43 +03:00
2024-02-07 15:49:36 +02:00
2023-02-01 00:32:00 +08:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2024-03-26 18:32:22 +02:00
2024-08-11 18:42:43 +03:00
2024-06-04 17:36:34 +02:00
2024-08-11 18:42:43 +03:00
2024-06-04 17:36:34 +02:00
2024-08-14 17:58:14 +03:00
2024-08-11 18:42:43 +03:00
2023-02-01 00:32:00 +08:00
2024-08-11 18:42:43 +03:00
2024-06-04 17:31:52 +02:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2023-08-25 09:53:00 +03:00
2022-11-11 20:03:40 +02:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2023-02-01 00:32:00 +08:00
2024-07-02 15:16:15 +03:00
2024-07-08 08:14:55 +00:00
2023-08-25 09:53:00 +03:00
2023-11-28 16:45:45 +00:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2023-08-25 09:53:00 +03:00
2023-06-15 08:22:55 +00:00
2024-04-21 22:19:28 +03:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2024-06-04 17:36:16 +02:00
2023-09-29 17:19:45 +03:00
2024-08-11 18:42:43 +03:00
2023-09-30 11:44:35 +00:00
2023-10-11 15:44:44 +03:00
2023-12-13 16:46:17 +01:00
2024-06-04 17:31:52 +02:00
2023-11-28 13:21:08 +02:00
2023-12-13 10:43:42 +02:00
2024-03-26 18:32:22 +02:00
2024-08-11 18:42:43 +03:00
2024-08-23 18:39:34 +03:00
2024-03-08 08:21:30 +00:00
2024-06-04 17:36:34 +02:00
2024-08-08 15:52:13 +00:00
2024-08-11 18:42:43 +03:00
2023-02-01 00:32:00 +08:00
2024-08-11 18:42:43 +03:00
2024-05-12 12:26:07 +03:00
2024-08-11 14:43:54 +03:00
2024-04-21 22:19:28 +03:00
2024-06-04 17:31:52 +02:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2023-06-15 08:22:18 +00:00
2023-08-25 09:53:00 +03:00
2024-09-01 17:46:49 +03:00
2024-08-11 18:42:43 +03:00
2024-08-17 10:39:52 +03:00
2023-04-24 10:50:38 +03:00
2024-08-11 18:42:43 +03:00
2024-03-26 18:32:22 +02:00
2024-08-11 18:42:43 +03:00
2024-06-04 17:31:52 +02:00
2024-06-04 17:36:16 +02:00
2024-08-11 18:42:43 +03:00
2024-08-11 18:42:43 +03:00
2023-02-01 00:32:00 +08:00
2023-08-25 09:53:00 +03:00
2024-02-02 11:33:44 +00:00
2024-05-12 12:26:07 +03:00
2023-05-13 08:19:43 +00:00