qcacmn: Validate vdev_id before accessing vdev_response_timer
As a part of vdev responses from the FW, the driver fetches the appropriate vdev_response_timer info using the vdev_id. This vdev_id is taken from the response coming from FW. Currently, this vdev_id is not being validated and is being used to access the array psoc_vdev_rt. This can potentially lead to out of bounds access. Add validation to the vdev_id before performing the fetch operation. Change-Id: I6f25a14ccc3c8a96a1b6c863a760809c29de4003 CRs-Fixed: 2658462
Loading
Please register or sign in to comment