Messages in this thread | ![/](/images/icornerl.gif) | | Date | Thu, 24 Aug 2023 21:03:22 -0600 | From | "Gustavo A. R. Silva" <> | Subject | [PATCH v2 0/3] wifi: mwifiex: Fix tlv_buf_left calculation and replace one-element array |
| |
Hi all!
This small series is aimed at fixing a bug in the tlv_buf_left calculation, doing a flexible-array transformation, and adding a couple of sanity checks.
Thanks
Changes in v2: - Fix format specifier in patch 3/3: %ld -> %zu - Update warning messages to explicitly mention that TLV size is greater than tlv_buf_len in patch 3/3.
v1: - Link: https://lore.kernel.org/linux-hardening/cover.1692829410.git.gustavoars@kernel.org/
Gustavo A. R. Silva (3): wifi: mwifiex: Fix tlv_buf_left calculation wifi: mwifiex: Replace one-element array with flexible-array member in struct mwifiex_ie_types_rxba_sync wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
.../wireless/marvell/mwifiex/11n_rxreorder.c | 22 ++++++++++++++++--- drivers/net/wireless/marvell/mwifiex/fw.h | 2 +- 2 files changed, 20 insertions(+), 4 deletions(-)
-- 2.34.1
| ![\](/images/icornerr.gif) |