From 60f39da9295aa0ab460ab2fde485c265972e53e2 Mon Sep 17 00:00:00 2001 From: Naveen Rawat Date: Tue, 3 Oct 2017 16:58:25 -0700 Subject: [PATCH] qcacld-3.0: Check vdev_id against wma->max_bssid Check vdev_id against wma->max_bssid in wma_mcc_vdev_tx_pause_evt_handler to avoid bufer overflow. Change-Id: Ie47a0ed2f7f27f13a01e1b2cb365fae66b41b1df CRs-Fixed: 2120677 --- core/wma/src/wma_data.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/core/wma/src/wma_data.c b/core/wma/src/wma_data.c index 9adf77bd7966..59054f192778 100644 --- a/core/wma/src/wma_data.c +++ b/core/wma/src/wma_data.c @@ -1641,7 +1641,8 @@ int wma_mcc_vdev_tx_pause_evt_handler(void *handle, uint8_t *event, * vdev_map = (1 << vdev_id) * So, host should unmap to ID */ - for (vdev_id = 0; vdev_map != 0; vdev_id++) { + for (vdev_id = 0; vdev_map != 0 && vdev_id < wma->max_bssid; + vdev_id++) { if (!(vdev_map & 0x1)) { /* No Vdev */ } else {