From: Jouni Malinen <jouni@qca.qualcomm.com>
Date: Tue, 7 Apr 2015 13:06:43 +0000 (+0300)
Subject: P2P: Use WPS_SEC_DEV_TYPE_MAX_LEN in P2P array definition
X-Git-Tag: hostap_2_5~834
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=632931c3cef852fc0a2a38150825cd949fff940e;p=thirdparty%2Fhostap.git

P2P: Use WPS_SEC_DEV_TYPE_MAX_LEN in P2P array definition

This makes it more obvious that the wps_parse_msg() bounds checking is
used to verify that there is sufficient space in the P2P buffer for the
secondary device types.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
---

diff --git a/src/p2p/p2p.h b/src/p2p/p2p.h
index 2a6b811b6..481ecacad 100644
--- a/src/p2p/p2p.h
+++ b/src/p2p/p2p.h
@@ -10,7 +10,7 @@
 #define P2P_H
 
 #include "common/ieee802_11_defs.h"
-#include "wps/wps_defs.h"
+#include "wps/wps.h"
 
 /* P2P ASP Setup Capability */
 #define P2PS_SETUP_NONE 0
@@ -317,7 +317,7 @@ struct p2p_peer_info {
 	 * This list includes from 0 to 16 Secondary Device Types as indicated
 	 * by wps_sec_dev_type_list_len (8 * number of types).
 	 */
-	u8 wps_sec_dev_type_list[128];
+	u8 wps_sec_dev_type_list[WPS_SEC_DEV_TYPE_MAX_LEN];
 
 	/**
 	 * wps_sec_dev_type_list_len - Length of secondary device type list