[PATCH v2 2/9] scan: fix out of bound array access for survey results
James Prestwood <[email protected]> Wed, 16 Apr 2025 10:33:38 -0700
| Newsgroups | dev.linux.lists.iwd |
|---|---|
| Message-ID | <[email protected]> |
The survey arrays were exactly the number of valid channels for a
given band (e.g. 14 for 2.4GHz) but since channels start at 1 this
means that the last channel for a band would overflow the array.
Fixes: 35808deb ("scan: use GET_SURVEY for SNR calculation in ranking")
---
src/scan.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/src/scan.c b/src/scan.c
index aeab6516..dfd667bb 100644
--- a/src/scan.c
+++ b/src/scan.c
@@ -143,9 +143,9 @@ struct scan_survey {
};
struct scan_survey_results {
- struct scan_survey survey_2_4[14];
- struct scan_survey survey_5[196];
- struct scan_survey survey_6[233];
+ struct scan_survey survey_2_4[15];
+ struct scan_survey survey_5[197];
+ struct scan_survey survey_6[234];
};
struct scan_results {
--
2.34.1