qcacld-3.0: Use right copy length for struct hecap_6ghz to avoid OOB

In function wlan_cfg80211_tdls_extract_6ghz_params(), the length of
req_info->he_6ghz_cap is two bytes, but with a copy length of the
length of pointer params->he_6ghz_capa. Make sure the righ copy
length is used here to avoid OOB.

Change-Id: I8e98c2a72ab032c3da9e0e213d1ea85f0653e0cb
CRs-Fixed: 3047149
This commit is contained in:
Qun Zhang
2021-09-29 14:34:05 +08:00
committed by Madan Koyyalamudi
parent aff7861235
commit 070ac60087

View File

@@ -249,7 +249,7 @@ wlan_cfg80211_tdls_extract_6ghz_params(struct tdls_update_peer_params *req_info,
}
qdf_mem_copy(&req_info->he_6ghz_cap, params->he_6ghz_capa,
sizeof(params->he_6ghz_capa));
sizeof(req_info->he_6ghz_cap));
}
#else
static void