Revert "UBUNTU: SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor"

BugLink: https://bugs.launchpad.net/bugs/1864773

This reverts commit f41dbb3e.
Note: it will be replaced by a modified version from linux-stable
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>

drivers/net/wireless/libertas/cfg.c

@@ -272,10 +272,6 @@ add_ie_rates(u8 *tlv, const u8 *ie, int *nrates)
 	int hw, ap, ap_max = ie[1];
 	u8 hw_rate;
 
-	if (ap_max > MAX_RATES) {
-		lbs_deb_assoc("invalid rates\n");
-		return tlv;
-	}
 	/* Advance past IE header */
 	ie += 2;
 
@@ -1849,10 +1845,6 @@ static int lbs_ibss_join_existing(struct lbs_private *priv,
 	} else {
 		int hw, i;
 		u8 rates_max = rates_eid[1];
-		if (rates_max > MAX_RATES) {
-			lbs_deb_join("invalid rates");
-			goto out;
-		}
 		u8 *rates = cmd.bss.rates;
 		for (hw = 0; hw < ARRAY_SIZE(lbs_rates); hw++) {
 			u8 hw_rate = lbs_rates[hw].bitrate / 5;