commit 0b9f78fa163ff3c19fed87f470281063f03ad44e
author Linux Build Service Account <lnxbuild@localhost> Wed May 16 00:39:39 2018 -0700
committer Gerrit - the friendly Code Review server <code-review@localhost> Wed May 16 00:39:39 2018 -0700
tree fc9ad4266aad43d11f8918116a997c2c8897bb4a
parent 0c2076936ac7be917f8dbcceff4e87ecd88b8ef3
parent d30dad6ef060a17a3d65879e4db6335f13150c33

Merge "qcacmn: Fix possible OOB access while sending NAN msg to firmware"

wmi_unified.c

diff --git a/wmi_unified.c b/wmi_unified.c
index 006154c..0ced7e7 100644
--- a/wmi_unified.c
+++ b/wmi_unified.c
@@ -2193,6 +2193,10 @@
 				param->rx_ops->wma_process_fw_event_handler_cbk;
 	wmi_handle->target_type = param->target_type;
 	soc->target_type = param->target_type;
+
+	if (param->target_type >= WMI_MAX_TARGET_TYPE)
+		goto error;
+
 	if (wmi_attach_register[param->target_type]) {
 		wmi_attach_register[param->target_type](wmi_handle);
 	} else {