qcacmn: Fix array subscript out of bound issue
Fix array indexing greater than array size which may lead to buffer over-read. CRs-Fixed: 2616852 Change-Id: I802a64fddaec1dffa8f09284af11c0ebe84b65f0
这个提交包含在:
@@ -713,7 +713,7 @@ int wlan_cfg_get_target_pdev_id(struct wlan_cfg_dp_soc_ctxt *cfg,
|
||||
{
|
||||
int idx;
|
||||
|
||||
for (idx = 0; idx < MAX_NUM_LMAC_HW; idx++) {
|
||||
for (idx = 0; idx < MAX_PDEV_CNT; idx++) {
|
||||
if (cfg->hw_macid[idx] == hw_macid)
|
||||
return (idx + 1);
|
||||
}
|
||||
|
在新工单中引用
屏蔽一个用户