Thread (11 messages) 11 messages, 5 authors, 2023-09-04

[PATCH v2 0/3] wifi: mwifiex: Fix tlv_buf_left calculation and replace one-element array

From: "Gustavo A. R. Silva" <gustavoars@kernel.org>
Date: 2023-08-25 03:03:19
Also in: linux-hardening, lkml

Hi all!

This small series is aimed at fixing a bug in the tlv_buf_left
calculation, doing a flexible-array transformation, and adding
a couple of sanity checks.

Thanks

Changes in v2:
 - Fix format specifier in patch 3/3: %ld -> %zu
 - Update warning messages to explicitly mention that TLV size is
   greater than tlv_buf_len in patch 3/3.

v1:
 - Link: https://lore.kernel.org/linux-hardening/cover.1692829410.git.gustavoars@kernel.org/ (local)

Gustavo A. R. Silva (3):
  wifi: mwifiex: Fix tlv_buf_left calculation
  wifi: mwifiex: Replace one-element array with flexible-array member in
    struct mwifiex_ie_types_rxba_sync
  wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len

 .../wireless/marvell/mwifiex/11n_rxreorder.c  | 22 ++++++++++++++++---
 drivers/net/wireless/marvell/mwifiex/fw.h     |  2 +-
 2 files changed, 20 insertions(+), 4 deletions(-)

-- 
2.34.1
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help