qcacld-2.0: Fix potential buffer overwrite in wma_vdev_start_rsp_ind

In function wma_vdev_start_rsp_ind, vdev_id is received from the FW
and is used to access wma_handle->interfaces without validating the
upper limit. If the value of vdev_id received from the FW is not
less than max_bssid, then a buffer overwrite will occur in the
function wma_vdev_start_rsp_ind.

Add sanity check to make sure vdev_id is less than max_bssid.

Change-Id: I83e1b797ca50a7fb58519f66dde26b035a2393ce
CRs-Fixed: 2150359
2 files changed
tree: 241d81c2af655b88c75ffcefc336ba819bdd57b1
  1. CORE/
  2. firmware_bin/
  3. wcnss/
  4. Android.mk
  5. Kbuild
  6. Kconfig
  7. Makefile