qcacmn: correct casting and array write index

- correct uint32_t* casting to uint16_t* given that it can overwrite values
after is dereferenced
- correct check for "for loop" max iteration as it could pass and
overwrite max array size.

Change-Id: Id2b02d1eea8c4ce4d962160bea99358fe3ab5cf7
CRs-Fixed: 3622399

dp/wifi3.0/monitor/2.0/dp_tx_mon_status_2.0.c

@@ -133,6 +133,9 @@ dp_tx_mon_status_queue_free(struct dp_pdev *pdev,
 	uint8_t i = tx_mon_be->cur_frag_q_idx;
 	uint32_t end_offset = 0;
 
+	if (last_frag_q_idx > MAX_STATUS_BUFFER_IN_PPDU)
+		last_frag_q_idx = MAX_STATUS_BUFFER_IN_PPDU;
+
 	for (; i < last_frag_q_idx; i++) {
 		status_frag = tx_mon_be->frag_q_vec[i].frag_buf;