]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
wifi: iwlwifi: fix pointer arithmetic in iwl_add_mcc_to_tas_block_list
authorEmmanuel Grumbach <emmanuel.grumbach@intel.com>
Wed, 15 Jul 2026 18:57:06 +0000 (21:57 +0300)
committerMiri Korenblit <miriam.rachel.korenblit@intel.com>
Thu, 16 Jul 2026 18:12:18 +0000 (21:12 +0300)
commitbc796f84ec9a95b356959ec7caf1d4fce33f3a76
tree5c587defa322ab47187c85e29db99ba7adae8a01
parenta31b0e535fd11219556c7382ee9f63b2438c3769
wifi: iwlwifi: fix pointer arithmetic in iwl_add_mcc_to_tas_block_list

The expression list[*size++] increments the pointer 'size'
rather than the u8 value it points to (operator precedence: ++
binds to the pointer before the dereference). As a result the
block-list entry is written at the correct index but *size is
never incremented, so the caller's count stays at zero and
subsequent calls overwrite slot 0 every time.

Change to list[(*size)++] so that the value pointed to by size
is incremented after use as the array index.

Fixes: 5f4656610edb ("wifi: iwlwifi: extend TAS_CONFIG cmd support for v5")
Assisted-by: GitHubCopilot:gpt-5.3-codex
Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://patch.msgid.link/20260715215523.d2cd92242582.Ife4140a4e27be2a1cd9f886c5a9b376ce182a019@changeid
drivers/net/wireless/intel/iwlwifi/fw/regulatory.c