| commit | 8b930b9806de9129f71bb707e95e0260ed47d8e7 | [log] [tgz] |
|---|---|---|
| author | Josh Conner <joshconner@google.com> | Tue May 21 21:08:25 2019 +0000 |
| committer | CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> | Tue May 21 21:08:25 2019 +0000 |
| tree | 5368029b3b4b434667176c8cf2a60a487883abe4 | |
| parent | c1ffc046451fab8a8f8cebf805bdf7839a021e31 [diff] |
[wlanif] Fix handling of large rate array
Fix handling when more than WLAN_MAC_MAX_RATES rates are passed to
ConvertRateSets. Instead of reading outside the bounds of the rate
array and allocating memory indefinitely, it now restricts operation
to the maximum allowable number of rates (and asserts in a debug
build).
WLAN-1135
TEST: Verified manually using the reproduction instructions from
WLAN-1135 (replaying invalid frames via scapy). This patch
also adds a new unit test for the case.
Change-Id: I666a4819cf6b27c76ec75fbe1cab1580db875da1
Pink + Purple == Fuchsia (a new operating system)
Fuchsia is a modular, capability-based operating system. Fuchsia runs on modern 64-bit Intel and ARM processors.
Fuchsia is an open source project with a code of conduct that we expect everyone who interacts with the project to respect.
See Getting Started.
See the documentation.