From: Choi, Jong-Hwan <jhbird.choi@samsung.com>
Date: Fri, 15 Jul 2011 01:56:25 +0000 (+0900)
Subject: net: wireless: bcm4329: fix array subscript is below array bounds
X-Git-Tag: firefly_0821_release~7613^2~409
X-Git-Url: http://demsky.eecs.uci.edu/git/?a=commitdiff_plain;h=b06f3b5edb8f9256f0435f13a439074291cd9055;p=firefly-linux-kernel-4.4.55.git

net: wireless: bcm4329: fix array subscript is below array bounds

Change-Id: I5d521895070d255f7ac0c9eaf262ec9f4cdd2f8a
Signed-off-by: Choi, Jong-Hwan <jhbird.choi@samsung.com>
---

diff --git a/drivers/net/wireless/bcm4329/dhd_linux.c b/drivers/net/wireless/bcm4329/dhd_linux.c
index c2d6587f30a5..5c1384bdc215 100644
--- a/drivers/net/wireless/bcm4329/dhd_linux.c
+++ b/drivers/net/wireless/bcm4329/dhd_linux.c
@@ -1941,6 +1941,9 @@ dhd_open(struct net_device *net)
 	ifidx = dhd_net2idx(dhd, net);
 	DHD_TRACE(("%s: ifidx %d\n", __FUNCTION__, ifidx));
 
+	if (ifidx == DHD_BAD_IF)
+		return -1;
+
 	if ((dhd->iflist[ifidx]) && (dhd->iflist[ifidx]->state == WLC_E_IF_DEL)) {
 		DHD_ERROR(("%s: Error: called when IF already deleted\n", __FUNCTION__));
 		return -1;