Thread (3 messages) 3 messages, 1 author, 8h ago

[PATCH wireless 0/2] wifi: wilc1000: add bounds checking for firmware-supplied fields

flat view
HOTtoday

From: Tristan Madani <hidden>
Date: 2026-11-01 20:38:53
Also in: stable
Subsystem: microchip wilc1000 wifi driver, the rest · Maintainers: Ajay Singh, Claudiu Beznea, Linus Torvalds

Two functions in the wilc1000 driver use length fields from
firmware-supplied buffers without sufficient validation. This
series adds bounds checks to prevent out-of-bounds reads when
the firmware provides unexpected values.

Tristan Madani (2):
  wifi: wilc1000: validate frame length in wilc_network_info_received()
  wifi: wilc1000: validate header fields in wilc_wlan_handle_rx_buff()

 drivers/net/wireless/microchip/wilc1000/hif.c  | 9 ++++++++-
 drivers/net/wireless/microchip/wilc1000/wlan.c | 3 +++
 2 files changed, 11 insertions(+), 1 deletion(-)

-- 
2.47.3
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help