[PATCH v2 0/3] wifi: wlcore: fix OOB reads from firmware event fields

Tristan Madani posted 3 patches 2 months ago
[PATCH v2 0/3] wifi: wlcore: fix OOB reads from firmware event fields
Posted by Tristan Madani 2 months ago
From: Tristan Madani <tristan@talencesecurity.com>

Hi Johannes,

Note: this is a v2 resubmission. The original was sent via Gmail which
caused HTML rendering issues. This version uses git send-email for
proper plain-text formatting.

Three issues in wlcore/wl18xx where firmware-controlled fields are used
as array indices or buffer offsets without validation:

Proposed fixes in the following patches.

Thanks,
Tristan