DF-1675 / fix.diff
--- a/sys/dev/netif/ath/ath_hal/ar5416/ar5416_ani.c +++ b/sys/dev/netif/ath/ath_hal/ar5416/ar5416_ani.c @@ -227,6 +227,8 @@ u_int level = param; HALDEBUG(ah, HAL_DEBUG_ANI, "%s: HAL_ANI_NOISE_IMMUNITY_LEVEL: set level = %d\n", __func__, level); + if (level > nitems(params->totalSizeDesired)) + return AH_FALSE; if (level > params->maxNoiseImmunityLevel) { HALDEBUG(ah, HAL_DEBUG_ANI, "%s: immunity level out of range (%u > %u)\n", |