It was possible for bitfield_get_first_zero() to read one octet beyond the allocated bit buffer in case the first zero bit was not within size-1 first octets. Signed-off-by: Jouni Malinen <j@w1.fi>
Signed-hostap: Jouni Malinen <j@w1.fi>