tree d0a8b2d0f15d5e628c033d8eccc1713aa7035cf2
parent 847dd5d5099d51cc73285f1aa8223e599abad3d2
author Vignesh Viswanathan <viswanat@codeaurora.org> 1507127949 +0530
committer snandini <snandini@codeaurora.org> 1507324690 -0700

qcacld-3.0: Add check for if_id in wma_tbttoffset_update_event_handler

Currently if_id used in the for loop is incremented based on vdev_map != 0
and vdev_map is a uint_32, received from FW, and is right shifted by one bit
for each iteration. This could result in if_id going upto max of 31 and cause
OOB read.

Add sanity check to make sure if_id is less than max_bssid.

Change-Id: I7e0c4e9a26cb67f41e35c60c2756d7ad02cf43ea
CRs-Fixed: 2119443