[PATCH v2 0/3] wifi: carl9170: fix buffer overflow and OOB reads in firmware response handling

Tristan Madani posted 3 patches 2 months ago
[PATCH v2 0/3] wifi: carl9170: fix buffer overflow and OOB reads in firmware response handling
Posted by Tristan Madani 2 months ago
From: Tristan Madani <tristan@talencesecurity.com>

Hi Christian,

Note: this is a v2 resubmission. The original was sent via Gmail which
caused HTML rendering issues. This version uses git send-email for
proper plain-text formatting.

Three issues in carl9170 firmware response handling.

Changes since v1:
- Patch 1/3 (cmd_callback memcpy): bound with min_t() instead of early
  return after carl9170_restart(), per your feedback.

Proposed fixes in the following patches.

Thanks,
Tristan