qcacmn: Enhancement for RNR IE processing

Since the idx is always initialized zero in function util_scan_parse_rnr_ie.
If there are two or more RNR IEs in the frame, then the RNR info is
overwritten by the last one.

Change-Id: If6d47871267ea43c3a5b3130cae73ebd0de45930
CRs-Fixed: 3183233
此提交包含在:
Paul Zhang
2022-04-27 08:30:48 +08:00
提交者 Madan Koyyalamudi
父節點 96c227a65d
當前提交 28df9f4e53

查看文件

@@ -885,12 +885,13 @@ util_scan_parse_rnr_ie(struct scan_cache_entry *scan_entry,
struct ie_header *ie)
{
uint32_t rnr_ie_len;
uint16_t tbtt_count, tbtt_length, i, fieldtype, idx = 0;
uint16_t tbtt_count, tbtt_length, i, fieldtype, idx;
uint8_t *data;
struct neighbor_ap_info_field *neighbor_ap_info;
rnr_ie_len = ie->ie_len;
data = (uint8_t *)ie + sizeof(struct ie_header);
idx = scan_entry->rnr.count;
while (data < ((uint8_t *)ie + rnr_ie_len + 2)) {
neighbor_ap_info = (struct neighbor_ap_info_field *)data;