From: Zhao Li <enderaoelyther@gmail.com>
Date: Fri, 12 Jun 2026 13:37:18 +0000 (+0800)
Subject: wifi: cfg80211: reject empty PMSR peer lists
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=57c05ce14fea03df01288fe1250f49197e161710;p=thirdparty%2Fkernel%2Flinux.git

wifi: cfg80211: reject empty PMSR peer lists

A PMSR request with an empty peers array is not a useful request and
weakens the cfg80211-to-driver contract by allowing start_pmsr() with
no target peer.

Reject empty peer lists before allocating the request object or calling
into the driver.

Fixes: 9bb7e0f24e7e7 ("cfg80211: add peer measurement with FTM initiator API")
Assisted-by: Codex:gpt-5.5
Assisted-by: Claude:claude-opus-4.8
Signed-off-by: Zhao Li <enderaoelyther@gmail.com>
Link: https://patch.msgid.link/20260612133717.93783-2-enderaoelyther@gmail.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
---

diff --git a/net/wireless/pmsr.c b/net/wireless/pmsr.c
index 34ecbc6644a3..34c3625f7fd5 100644
--- a/net/wireless/pmsr.c
+++ b/net/wireless/pmsr.c
@@ -444,6 +444,11 @@ int nl80211_pmsr_start(struct sk_buff *skb, struct genl_info *info)
 		}
 	}
 
+	if (!count) {
+		NL_SET_ERR_MSG_ATTR(info->extack, peers, "No peers specified");
+		return -EINVAL;
+	}
+
 	req = kzalloc_flex(*req, peers, count);
 	if (!req)
 		return -ENOMEM;