qcacmn: Fix NDP Config QoS policy

The qca_wlan_vendor_ndp_policy for the attribute
QCA_WLAN_VENDOR_ATTR_NDP_CONFIG_QOS currently specifies type
NLA_BINARY with a maximum length of NDP_QOS_INFO_LEN (255). However
this attribute is defined to be an unsigned 32 bit value, and
nla_get_u32() is used to read the value, so change the policy to use
type NLA_U32 so that nla_parse() can properly verify that the TLV
payload has (at least) 4 bytes of data.

Change-Id: Iee5b620ef199b731fc6a449d0055db328430921b
CRs-Fixed: 2237660
This commit is contained in:
Jeff Johnson
2018-05-07 17:55:20 -07:00
committed by nshrivas
parent bc404efdf3
commit c3fd2a0d86

View File

@@ -67,8 +67,8 @@ vendor_attr_policy[QCA_WLAN_VENDOR_ATTR_NDP_PARAMS_MAX + 1] = {
.len = sizeof(uint16_t)
},
[QCA_WLAN_VENDOR_ATTR_NDP_CONFIG_QOS] = {
.type = NLA_BINARY,
.len = NDP_QOS_INFO_LEN
.type = NLA_U32,
.len = sizeof(uint32_t)
},
[QCA_WLAN_VENDOR_ATTR_NDP_APP_INFO] = {
.type = NLA_BINARY,