qcacld-3.0: Fix OOB read issue in wma_populate_soc_caps

wma_populate_soc_caps calculate number of mac cap to
populate per hw mode and generate map and calls qdf_mem_copy
to copy mac_phy_caps coming from fw to local buffer. wma_populate_soc_caps
uses num_of_mac_caps as number of bytes to copy. possible OOB
could occurs if num_of_mac_caps greater than max num allowed in fw
(param_buf->num_mac_phy_caps).

Fix is to add a sanity check for num_of_mac_caps against
param_buf->num_mac_phy_cap.

Change-Id: Ia33bb0387975d56be0f1be4b885d2150cc81973c
CRs-Fixed: 2308935

0 files changed, 0 insertions, 0 deletions