|
@@ -1557,7 +1557,7 @@ static void csr_save_tx_power_to_cfg(struct mac_context *mac,
|
|
|
count++;
|
|
|
}
|
|
|
} else {
|
|
|
- if (cbLen >= dataLen) {
|
|
|
+ if (cbLen + sizeof(tSirMacChanInfo) >= dataLen) {
|
|
|
/* this entry will overflow our allocation */
|
|
|
sme_err(
|
|
|
"Buffer overflow, start freq %d, num %d, offset %d",
|