Skip to content

wifi: mwifiex: Fix tlv_buf_left calculation and replace one-element array

Gustavo A. R. Silva linux-hardening linux-wireless lkml 2 versions – In review

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v2 Latest3 patches 7 repliesIn review
  2. v13 patches 3 repliesSuperseded

Changes in v2 from the cover letter

- Fix format specifier in patch 3/3: %ld -> %zu
- Update warning messages to explicitly mention that TLV size is greater than tlv_buf_len in patch 3/3.

Patches in v2 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3wifi: mwifiex: Fix tlv_buf_left calculationdrivers/net/wireless/marvell/mwifiex/11n_rxreorder.c+2 -23 replies
2/3wifi: mwifiex: Replace one-element array with flexible-array member in struct mwifiex_ie_types_rxba_syncdrivers/net/wireless/marvell/mwifiex/11n_rxreorder.c drivers/net/wireless/marvell/mwifiex/fw.h+2 -21 reply
3/3wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_lendrivers/net/wireless/marvell/mwifiex/11n_rxreorder.c+16 -03 replies

Reviews trailers per patch

All 3 patches have a Reviewed-by or Acked-by.

PatchKees Cook
1/3R-b
2/3R-b
3/3R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v2 thread

Cover letter [PATCH v2 0/3] wifi: mwifiex: Fix tlv_buf_left calculation and replace one-element array

Hi all!

This small series is aimed at fixing a bug in the tlv_buf_left calculation, doing a flexible-array transformation, and adding a couple of sanity checks.

Thanks

Changes in v2:
- Fix format specifier in patch 3/3: %ld -> %zu
- Update warning messages to explicitly mention that TLV size is greater than tlv_buf_len in patch 3/3.

v1:
- Link: https://lore.kernel.org/linux-hardening/[email protected]/

Gustavo A. R. Silva (3):
wifi: mwifiex: Fix tlv_buf_left calculation
wifi: mwifiex: Replace one-element array with flexible-array member in
struct mwifiex_ie_types_rxba_sync
wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len

 .../wireless/marvell/mwifiex/11n_rxreorder.c  | 22 ++++++++++++++++---
 drivers/net/wireless/marvell/mwifiex/fw.h     |  2 +-
 2 files changed, 20 insertions(+), 4 deletions(-)
Signature · 1 line
2.34.1

Read the cover letter in its thread