kernel/drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c
.. .. @@ -618,7 +618,7 @@ 618 618 } 619 619 620 620 if (!brcmf_chip_set_active(devinfo->ci, resetintr)) 621 - return -EINVAL;621 + return -EIO;622 622 return 0; 623 623 } 624 624 .. .. @@ -1109,6 +1109,10 @@ 1109 1109 BRCMF_NROF_H2D_COMMON_MSGRINGS; 1110 1110 max_completionrings = BRCMF_NROF_D2H_COMMON_MSGRINGS; 1111 1111 } 1112 + if (max_flowrings > 512) {1113 + brcmf_err(bus, "invalid max_flowrings(%d)\n", max_flowrings);1114 + return -EIO;1115 + }1112 1116 1113 1117 if (devinfo->dma_idx_sz != 0) { 1114 1118 bufsz = (max_submissionrings + max_completionrings) *