qcacmn: Validate number of entries in extract_host_mem_req_tlv()

Validate num_mem_reqs should be less than TLV size in
extract_host_mem_req_tlv() function.

Change-Id: I88ebfc4bfe3abb9b0926990f5f777fc0d62e1fc1
CRs-Fixed: 2347667

parent a85d5c39

wmi/src/wmi_unified_tlv.c

+6 −0

Original line number	Diff line number	Diff line
		@@ -13029,6 +13029,12 @@ static host_mem_req *extract_host_mem_req_tlv(wmi_unified_t wmi_handle,
		return NULL;
		}

		if (ev->num_mem_reqs > param_buf->num_mem_reqs) {
		WMI_LOGE("Invalid num_mem_reqs %d:%d",
		ev->num_mem_reqs, param_buf->num_mem_reqs);
		return NULL;
		}

		*num_entries = ev->num_mem_reqs;

		return (host_mem_req *)param_buf->mem_reqs;