i40e: fix idx validation in config queues msg

jira VULN-161968
cve CVE-2025-39971
commit-author Lukasz Czapnik <[email protected]>
commit f1ad24c

Ensure idx is within range of active/initialized TCs when iterating over
vf->ch[idx] in i40e_vc_config_queues_msg().

Fixes: c27eac4 ("i40e: Enable ADq and create queue channel/s on VF")
	Cc: [email protected]
	Signed-off-by: Lukasz Czapnik <[email protected]>
	Reviewed-by: Aleksandr Loktionov <[email protected]>
	Signed-off-by: Przemek Kitszel <[email protected]>
	Reviewed-by: Simon Horman <[email protected]>
	Tested-by: Kamakshi Nellore <[email protected]> (A Contingent Worker at Intel)
	Signed-off-by: Tony Nguyen <[email protected]>
(cherry picked from commit f1ad24c)
	Signed-off-by: Brett Mastbergen <[email protected]>

Author: bmastbergen

drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c

@@ -2384,7 +2384,7 @@ static int i40e_vc_config_queues_msg(struct i40e_vf *vf, u8 *msg)
 		}
 
 		if (vf->adq_enabled) {
-			if (idx >= ARRAY_SIZE(vf->ch)) {
+			if (idx >= vf->num_tc) {
 				aq_ret = -ENODEV;
 				goto error_param;
 			}
@@ -2405,7 +2405,7 @@ static int i40e_vc_config_queues_msg(struct i40e_vf *vf, u8 *msg)
 		 * to its appropriate VSIs based on TC mapping
 		 */
 		if (vf->adq_enabled) {
-			if (idx >= ARRAY_SIZE(vf->ch)) {
+			if (idx >= vf->num_tc) {
 				aq_ret = -ENODEV;
 				goto error_param;
 			}