3548a66560888827ad34162c40f58445439310d5

In rrm_fill_beacon_ies(), the len is the total length of IE + 2 bytes for element ID (1 byte) and length of the IE(1 byte). Length is defined of type uint8_t and can have only values upto 255. When the IE content length is 254, adding 2 bytes to this will cause the len to overflow resulting in continuous loop in rrm_fill_beacon_ies. Change the len type to uint16_t to avoid integer overflow. Change-Id: Id6a6bcce150f778e24316ccc5fb51c6e2a95fc5e CRs-Fixed: 2537774
This is CNSS WLAN Host Driver for products starting from iHelium
Опис
Мови
C
98.7%
C++
0.9%
Makefile
0.3%
Starlark
0.1%