Browse Source

qcacmn: Handle mlo_grp_id value for rx_reo_release_frames

Handle mlo_grp_id value for rx_reo_release_frames so it cant be
more than WLAN_MAX_MLO_GROUPS

Change-Id: Id6761f125d1ce04d8b10753f86e1d2c1cb30c65e
CRs-Fixed: 3620074
Guru Pratap Sharma 1 year ago
parent
commit
0e29c2b760
1 changed files with 5 additions and 0 deletions
  1. 5 0
      umac/cmn_services/mgmt_txrx/core/src/wlan_mgmt_txrx_rx_reo.c

+ 5 - 0
umac/cmn_services/mgmt_txrx/core/src/wlan_mgmt_txrx_rx_reo.c

@@ -3133,6 +3133,11 @@ mgmt_rx_reo_release_frames(uint8_t mlo_grp_id, uint32_t link_bitmap)
 	QDF_STATUS ret;
 	QDF_STATUS ret;
 	struct mgmt_rx_reo_context_info ctx_info = {0};
 	struct mgmt_rx_reo_context_info ctx_info = {0};
 
 
+	if (mlo_grp_id >= WLAN_MAX_MLO_GROUPS) {
+		mgmt_rx_reo_err("Invalid mlo grp id");
+		return QDF_STATUS_E_INVAL;
+	}
+
 	reo_context = mgmt_rx_reo_get_context(mlo_grp_id);
 	reo_context = mgmt_rx_reo_get_context(mlo_grp_id);
 	if (!reo_context) {
 	if (!reo_context) {
 		mgmt_rx_reo_err("Mgmt rx reo context is null");
 		mgmt_rx_reo_err("Mgmt rx reo context is null");