commit aaad10248cc7377e8eef4d6e8d421384bfdbea89
author Nagalakshmi <quic_nmenthul@quicinc.com> Tue Nov 29 22:48:35 2022 -0800
committer Michael Bestas <mkbestas@lineageos.org> Tue Jun 06 17:17:43 2023 +0300
tree 3718245942c40aa52f65107fc04594bceec0c4ee
parent 31d7ba3d2582166e3e16bb3ed3fd9b6b70a38021

qcacld-3.0: Fix OOB in wma_scan_roam.c

Currently in wma_extscan_hotlist_match_event_handler
API, dest_hotlist get memory allocation based on numap
which takes value from event->total_entries.
But numap is limited to WMA_EXTSCAN_MAX_HOTLIST_ENTRIES
and event->total_entries more than WMA_EXTSCAN_MAX_HOTLIST_ENTRIES
can cause out of bound issue.

Fix is to populate dest_hotlist->numOfAps from numap
instead of event->total_entries to avoid any out of bound issue.

Change-Id: I756f7e4a4dcd454508bba83d4a8bbbb139530905
CRs-Fixed: 3346781