HS 2.0: Allocate enough buffer for HS 2.0 Indication element for scan

The HS 2.0 Indication element can be up to 9 octets in length, so add
two more octets to the minimum extra_ie buffer size for scanning.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

diff --git a/wpa_supplicant/scan.c b/wpa_supplicant/scan.c
index be328dedb7ad69cdce6920e11b9b3f6e95c2ecf2..52b521f93da0851d1b2dde569a7c60ed496f93ce 100644 (file)
--- a/wpa_supplicant/scan.c
+++ b/wpa_supplicant/scan.c
@@ -581,7 +581,7 @@ static struct wpabuf * wpa_supplicant_extra_ies(struct wpa_supplicant *wpa_s)
 #endif /* CONFIG_WPS */
 
 #ifdef CONFIG_HS20
-       if (wpa_s->conf->hs20 && wpabuf_resize(&extra_ie, 7) == 0)
+       if (wpa_s->conf->hs20 && wpabuf_resize(&extra_ie, 9) == 0)
                wpas_hs20_add_indication(extra_ie, -1, 0);
 #endif /* CONFIG_HS20 */