kernel/drivers/net/wireless/broadcom/brcm80211/brcmfmac/firmware.c
.. .. @@ -703,6 +703,11 @@ 703 703 u32 i, j; 704 704 char end = '\0'; 705 705 706 + if (chiprev >= BITS_PER_TYPE(u32)) {707 + brcmf_err("Invalid chip revision %u\n", chiprev);708 + return NULL;709 + }710 +706 711 for (i = 0; i < table_size; i++) { 707 712 if (mapping_table[i].chipid == chip && 708 713 mapping_table[i].revmask & BIT(chiprev))