62d9899e8cd5aee9f1360b9549e52403eb6aeb65

In function wlan_hdd_send_roam_auth_event, FILS kek is copied to skb for the vendor command QCA_WLAN_VENDOR_ATTR_ROAM_AUTH_PTK_KEK for kek_len length. There is no validation for the max value of kek_len and would lead to an buffer over-read if kek_len exceeds SIR_KEK_KEY_LEN_FILS. Add sanity check for kek_len for max limit SIR_KEK_KEY_LEN_FILS before copying the kek to skb. Change-Id: I4290909cd2df8686a32d25aa14711db2b899b2eb CRs-Fixed: 2152985
This is CNSS WLAN Host Driver for products starting from iHelium
توضیحات
Languages
C
98.7%
C++
0.9%
Makefile
0.3%
Starlark
0.1%