]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
wifi: iwlwifi: mvm: validate MCC header before n_channels
authorEmmanuel Grumbach <emmanuel.grumbach@intel.com>
Tue, 14 Jul 2026 11:19:57 +0000 (14:19 +0300)
committerMiri Korenblit <miriam.rachel.korenblit@intel.com>
Tue, 14 Jul 2026 17:45:20 +0000 (20:45 +0300)
commit77f33bed0cb49a11f03427f2fa368830c1cae3c2
tree44b83ec31f379d50454c3243ed41591efafaa8b4
parentb77c6f50b1f80414cb3f542ae72e532ed90fc7f7
wifi: iwlwifi: mvm: validate MCC header before n_channels

MCC response parsing read n_channels from v8/v4/v3 response variants
before ensuring the payload contained the fixed response header.

Add a minimum payload-length check for each response version before
reading n_channels, and keep the existing exact-size validation for the
channels array payload.

Assisted-by: GitHub Copilot:gpt-5.3-codex
Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
Link: https://patch.msgid.link/20260714141909.cb2cef3d3e7e.Iee7b48614289da576de842157ad3730b7589a4b1@changeid
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
drivers/net/wireless/intel/iwlwifi/mvm/nvm.c