Some of softap APIs like hdd_softap_register_sta() contain sta_id validation check against maximum value of HDD_MAX_ADAPTERS before accessing adapter->sta_info[sta_id]. Since the maximum size of adapter->sta_info[] is WLAN_MAX_STA_COUNT and less than HDD_MAX_ADAPTERS (used in sta_id index validation) array out of bounds access is possible. To fix this, validate sta_id index against maximum value of WLAN_MAX_STA_COUNT instead of HDD_MAX_ADAPTERS. Change-Id: I18390a76a3bee852a9d6ca3dde4382fa94387594 CRs-Fixed: 2486518 |
||
---|---|---|
.. | ||
inc | ||
src |