Ashish Kumar Dhanotiya 87baef651f qcacld-3.0: Validate assoc response IE len before copy ... When host sends assoc response to supplicant, it allocates a buffer of fixed size and copies a variable length of assoc response IEs to this fixed sized buffer. There is a possibility of OOB write to the allocated buffer if the assoc response IEs length is greater than the allocated buffer size. To avoid above issue validate the assoc response IEs length with the allocated buffer size before data copy to the buffer. Change-ID: Ib12385e9ff04e5172ae8b505faf959e426fda439 CRs-Fixed: 2583124		2019-12-27 09:22:49 -08:00
..
inc	qcacld-3.0: use debugfs to show ini configs	2019-12-27 05:17:55 -08:00
src	qcacld-3.0: Validate assoc response IE len before copy	2019-12-27 09:22:49 -08:00