20e6be3aa4
In wlan_mlo_parse_t2lm_ie(), the code is present to check if the frame length is less than the parsed IE length plus size of ie_header structure (2 bytes). If the above condition is false then the subsequent code will access the data of parsed IE length plus size of extn_ie_header structure (3 bytes). To fix the out-of-bound read, check if the frame length is less than parsed IE length plus size of extn_ie_header structure. Also, added the code to return success if frame length is same as parsed IE length. Change-Id: I07c32379ecd18d253a82876127c33b4d95196dd2 CRs-Fixed: 3704796
This is CNSS WLAN Host Driver for products starting from iHelium