tag 6afb0981722741fcfc7047b02167bce71ce93239
tagger The Android Open Source Project <initial-contribution@android.com> Mon Jan 06 10:44:03 2020 -0800
object e9c79c14053cb213588fba54ac80528c91f9aa4a

Android 10.0.0 Release 0.35

commit e9c79c14053cb213588fba54ac80528c91f9aa4a
author Sunil Ravi <sunilravi@google.com> Thu Nov 21 14:44:08 2019 -0800
committer Sunil Ravi <sunilravi@google.com> Thu Nov 21 14:44:08 2019 -0800
tree 5239c3a8edeb74eead3fb2fe31e892439bf77e58
parent 13844deed158568f5924b30268540567f8f0c52f

qcacld-3.0: Validate number of requested EIDs in beacon request

If the requested info field in beacon report request is present,
the driver tries to allocate memory for the target beacon report
EIDs from the number of requested EIDs received from the frame.
Since the number of requested EIDs is directly controlled by the
frame sent by AP, validate this value before using it to allocate
memory.

Bug: 144843138
Change-Id: Icbac3e952de0d7ae3144e9b319f2c51ccdf93ac5
CRs-Fixed: 2571480
Signed-off-by: Sunil Ravi <sunilravi@google.com>