瀏覽代碼

qcacld-3.0: Add presence check for structure tDot11fQosMapConfigure

qcacld-2.0 to qcacld-3.0 propagation

Current logic use the "not present" structure tDot11fQosMapConfigure
to calculate the array index which lead to the array overflow and
crash of VosMCThread. Add check code to avoid this problem.

Change-Id: Ifa08b24a06e409fed1bd445574127fef02f21d19
CRs-Fixed: 978582
zding 8 年之前
父節點
當前提交
230175c758
共有 1 個文件被更改,包括 1 次插入1 次删除
  1. 1 1
      core/mac/src/sys/legacy/src/utils/src/parser_api.c

+ 1 - 1
core/mac/src/sys/legacy/src/utils/src/parser_api.c

@@ -4636,7 +4636,7 @@ sir_convert_qos_map_configure_frame2_struct(tpAniSirGlobal pMac,
 	uint32_t status;
 	status =
 		dot11f_unpack_qos_map_configure(pMac, pFrame, nFrame, &mapConfigure);
-	if (DOT11F_FAILED(status)) {
+	if (DOT11F_FAILED(status) || !mapConfigure.QosMapSet.present) {
 		dot11f_log(pMac, LOGE,
 			   FL("Failed to parse Qos Map Configure frame (0x%08x, %d bytes):"),
 			   status, nFrame);