In function convert_qos_mapset_frame, restrict dscp_exceptions array access index to size of array Change-Id: I31ed8edaee1a9b3715f66686a8a45d5f2ffd4532 CRs-Fixed: 1042968
@@ -722,7 +722,7 @@ void convert_qos_mapset_frame(tpAniSirGlobal pMac, tSirQosMapSet *Qos,
Qos->dscp_exceptions[i][1] = dot11fIE->dscp_exceptions[j];
j++;
}
- for (i = 0; i < 8; i++) {
+ for (i = 0; i < 8 && j < dot11_dscp_sz; i++) {
Qos->dscp_range[i][0] = dot11fIE->dscp_exceptions[j];
Qos->dscp_range[i][1] = dot11fIE->dscp_exceptions[j];