qcacld-2.0: Fix potential buffer overwrite in wma_vdev_start_rsp_ind
In function wma_vdev_start_rsp_ind, vdev_id is received from the FW
and is used to access wma_handle->interfaces without validating the
upper limit. If the value of vdev_id received from the FW is not
less than max_bssid, then a buffer overwrite will occur in the
Add sanity check to make sure vdev_id is less than max_bssid.
2 files changed