diff options
| -rw-r--r-- | core/wma/src/wma_utils.c | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/core/wma/src/wma_utils.c b/core/wma/src/wma_utils.c index 8e513ee88e33..7d4eff74e654 100644 --- a/core/wma/src/wma_utils.c +++ b/core/wma/src/wma_utils.c @@ -2123,6 +2123,17 @@ int wma_unified_link_iface_stats_event_handler(void *handle, return -EINVAL; } + if (link_stats->num_ac > WIFI_AC_MAX) { + WMA_LOGE("%s: Excess data received from firmware num_ac %d", + __func__, link_stats->num_ac); + return -EINVAL; + } + if (fixed_param->num_offload_stats > WMI_OFFLOAD_STATS_TYPE_MAX) { + WMA_LOGE("%s: Excess num offload stats recvd from fw: %d", + __func__, fixed_param->num_offload_stats); + return -EINVAL; + } + link_stats_size = sizeof(tSirWifiIfaceStat); iface_info_size = sizeof(tSirWifiInterfaceInfo); |