From 7dba71627275d2a82f4bbd5f178f178f42387e38 Mon Sep 17 00:00:00 2001
From: "tarun.kumar" <tarun.kumar@espressif.com>
Date: Wed, 26 Mar 2025 12:42:14 +0530
Subject: [PATCH] fix(wifi): Resolve out-of-bounds memory access in
 ieee80211w_kde_add

---
 components/esp_wifi/lib                           | 2 +-
 components/wpa_supplicant/src/common/wpa_common.h | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/components/esp_wifi/lib b/components/esp_wifi/lib
index 902e91a7e6..94bb77fced 160000
--- a/components/esp_wifi/lib
+++ b/components/esp_wifi/lib
@@ -1 +1 @@
-Subproject commit 902e91a7e6fbef55ece52ab234ddf6686bf177a0
+Subproject commit 94bb77fced1b7b46314695d322ab5b99dd54b1a8
diff --git a/components/wpa_supplicant/src/common/wpa_common.h b/components/wpa_supplicant/src/common/wpa_common.h
index d682f29bd0..d4d164db0c 100644
--- a/components/wpa_supplicant/src/common/wpa_common.h
+++ b/components/wpa_supplicant/src/common/wpa_common.h
@@ -290,7 +290,7 @@ struct rsn_error_kde {
 struct wpa_igtk_kde {
 	u8 keyid[2];
 	u8 pn[6];
-	u8 igtk[WPA_IGTK_LEN];
+	u8 igtk[WPA_IGTK_MAX_LEN];
 } STRUCT_PACKED;
 #endif /* CONFIG_IEEE80211W */