diff --git a/hal/wifi3.0/hal_rx.c b/hal/wifi3.0/hal_rx.c
index 967601fc998a..44cac9ea9244 100644
--- a/hal/wifi3.0/hal_rx.c
+++ b/hal/wifi3.0/hal_rx.c
@@ -73,7 +73,8 @@ void hal_reo_qdesc_setup(void *hal_soc, int tid, uint32_t ba_window_size,
 	uint32_t *reo_queue_desc = (uint32_t *)hw_qdesc_vaddr;
 	uint32_t *reo_queue_ext_desc;
 	uint32_t reg_val;
-	uint32_t pn_enable, pn_size;
+	uint32_t pn_enable;
+	uint32_t pn_size = 0;
 
 	qdf_mem_zero(hw_qdesc_vaddr, sizeof(struct rx_reo_queue));
 
diff --git a/hal/wifi3.0/hal_srng.c b/hal/wifi3.0/hal_srng.c
index 3f241cee8e9a..22efd036a784 100644
--- a/hal/wifi3.0/hal_srng.c
+++ b/hal/wifi3.0/hal_srng.c
@@ -680,7 +680,7 @@ static void hal_validate_shadow_register(struct hal_soc *hal,
 
 	index =	shadow_address - shadow_0_offset;
 
-	if (index > MAX_SHADOW_REGISTERS) {
+	if (index >= MAX_SHADOW_REGISTERS) {
 		QDF_TRACE(QDF_MODULE_ID_TXRX, QDF_TRACE_LEVEL_ERROR,
 			"%s: index %x out of bounds\n", __func__, index);
 		goto error;