commit ad61904f62e9c5e18bacb94b0250493dbf9a5479
author Nagalakshmi <quic_nmenthul@quicinc.com> Tue Nov 29 22:48:35 2022 -0800
committer Alexander Martinz <alex@amartinz.at> Wed Oct 25 07:55:06 2023 +0200
tree 73a1aa5824e810b23f26b6e22e0774012b57f24e
parent 004f8ac8393bcda1358506f81225e12d9254698d

qcacld-3.0: Fix OOB in wma_scan_roam.c

Currently in wma_extscan_hotlist_match_event_handler
API, dest_hotlist get memory allocation based on numap
which takes value from event->total_entries.
But numap is limited to WMA_EXTSCAN_MAX_HOTLIST_ENTRIES
and event->total_entries more than WMA_EXTSCAN_MAX_HOTLIST_ENTRIES
can cause out of bound issue.

Fix is to populate dest_hotlist->numOfAps from numap
instead of event->total_entries to avoid any out of bound issue.

Change-Id: I756f7e4a4dcd454508bba83d4a8bbbb139530905
CRs-Fixed: 3346781