[PATCH] nl80211: Fix frequencies array boundary check

Andrei Otcheretianski andrei.otcheretianski at intel.com
Thu Feb 23 04:23:06 PST 2023


From: Avraham Stern <avraham.stern at intel.com>

The number of frequencies is increased before the boundary check,
thus it should be allowed to be equal to the number of elements in
the array.

Signed-off-by: Avraham Stern <avraham.stern at intel.com>
---
 src/drivers/driver_nl80211_event.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/drivers/driver_nl80211_event.c b/src/drivers/driver_nl80211_event.c
index e3fcb44022..412611dfe2 100644
--- a/src/drivers/driver_nl80211_event.c
+++ b/src/drivers/driver_nl80211_event.c
@@ -1732,7 +1732,7 @@ static void send_scan_event(struct wpa_driver_nl80211_data *drv, int aborted,
 			if (!os_snprintf_error(end - pos, res))
 				pos += res;
 			num_freqs++;
-			if (num_freqs == MAX_REPORT_FREQS - 1)
+			if (num_freqs == MAX_REPORT_FREQS)
 				break;
 		}
 		info->freqs = freqs;
-- 
2.38.1




More information about the Hostap mailing list