浏览代码

qcacmn: Fix invalid conditional check for BTM preference

While parsing the BTM request candidates TLV, there is a
wrong conditional check to avoid buffer over read.

Fix invalid conditional check for BTM preference

Change-Id: I76e55cebc9525ee4a690747c9372c6f2a8166325
CRs-Fixed: 3078160
Pragaspathi Thilagaraj 3 年之前
父节点
当前提交
465d1dfb24
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      wmi/src/wmi_unified_tlv.c

+ 1 - 1
wmi/src/wmi_unified_tlv.c

@@ -15212,7 +15212,7 @@ extract_roam_11kv_candidate_info(wmi_unified_t wmi_handle, void *evt_buf,
 	if (!param_buf || !param_buf->roam_btm_request_candidate_info ||
 	    !param_buf->num_roam_btm_request_candidate_info ||
 	    (btm_idx +
-	     num_cand) >= param_buf->num_roam_btm_request_candidate_info)
+	     num_cand) > param_buf->num_roam_btm_request_candidate_info)
 		return QDF_STATUS_SUCCESS;
 
 	src_data = &param_buf->roam_btm_request_candidate_info[btm_idx];