83c55429be2ba0b156f665dac11ce2136dc05962

Hostapd sends RSNIE with around 18AKMs. However, the driver data structures allow storage upto 6 AKMs only. Therefore, the dot11f unpack modules returns BAD IE. The akm suite however carries the parsed count of 18. The HDD caller checks only DOT11F_FAILED, which doesn't cover many of the DOT11F_xx failure status codes. Therefore, instead of failing BSS, the IE is processed further and access of 18 contiguous AKMs takes place leading to OOB read crash. To fix this, check for all the failure status code and stop the BSS upon RSN/WPA/WAPI IE parse failure. Change-Id: I16399c8a5bd61b09d29cd88e35c0ec441c6b9af4 CRs-Fixed: 3445762
This is CNSS WLAN Host Driver for products starting from iHelium
Описание
Languages
C
98.7%
C++
0.9%
Makefile
0.3%
Starlark
0.1%