qcacld-3.0: Possible mem corruption while processing BCN RPT Req

The beacon report logic has the maximum 7 reports to include in
one measurement report frame. Update the no.of reports value
in the frame packing structure to pack 7 reports in one frame.

Change-Id: I92b33f024274765e0f8cf1386197a9dba05b4bab
CRs-Fixed: 2755806
This commit is contained in:
Kiran Kumar Lokere 2020-08-14 16:37:02 -07:00 committed by snandini
parent 4e2f534863
commit e8b23d5cdd
3 changed files with 5 additions and 5 deletions

View File

@ -4124,7 +4124,7 @@ FRAME RadioMeasurementReport
FF Action;
FF DialogToken;
//Measurement Report elements.
MANDIE MeasurementReport[1..4];
MANDIE MeasurementReport[1..7];
}
FRAME LinkMeasurementRequest

View File

@ -26,7 +26,7 @@
*
*
* This file was automatically generated by 'framesc'
* Tue Aug 11 23:34:13 2020 from the following file(s):
* Fri Aug 14 16:33:26 2020 from the following file(s):
*
* dot11f.frms
*
@ -10504,7 +10504,7 @@ typedef struct sDot11fRadioMeasurementReport{
tDot11fFfAction Action;
tDot11fFfDialogToken DialogToken;
uint16_t num_MeasurementReport;
tDot11fIEMeasurementReport MeasurementReport[4];
tDot11fIEMeasurementReport MeasurementReport[7];
} tDot11fRadioMeasurementReport;
#define DOT11F_RADIOMEASUREMENTREPORT (24)

View File

@ -24,7 +24,7 @@
*
*
* This file was automatically generated by 'framesc'
* Tue Aug 11 23:34:13 2020 from the following file(s):
* Fri Aug 14 16:33:26 2020 from the following file(s):
*
* dot11f.frms
*
@ -11488,7 +11488,7 @@ static const tIEDefn IES_RadioMeasurementReport[] = {
{ offsetof(tDot11fRadioMeasurementReport, MeasurementReport),
offsetof(tDot11fIEMeasurementReport, present),
offsetof(tDot11fRadioMeasurementReport, num_MeasurementReport),
"MeasurementReport", 4, 5, 31, SigIeMeasurementReport, {0, 0, 0, 0, 0},
"MeasurementReport", 7, 5, 31, SigIeMeasurementReport, {0, 0, 0, 0, 0},
0, DOT11F_EID_MEASUREMENTREPORT, 0, 1, },
{0, 0, 0, NULL, 0, 0, 0, 0, {0, 0, 0, 0, 0}, 0, 0xff, 0, },};