linux/drivers/net/wireless/intel
Emmanuel Grumbach d13d5d299c wifi: iwlwifi: validate SEC_RT TLV minimum size
Reject firmware section TLVs that are shorter than the offset field
before subtracting sizeof(offset) from the section size.

This prevents size underflow for malformed TLVs.

Assisted-by: GitHubCopilot:GPT-5.3-Codex
Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
Link: https://patch.msgid.link/20260717173215.17b040b27edc.I6b32d1e9ad707417e2e604f08a63582456209372@changeid
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
2026-07-18 22:37:38 +03:00
..
ipw2x00 wifi: libipw: fix key index receive bound checks 2026-07-06 14:11:09 +02:00
iwlegacy wifi: iwlegacy: Fix GFP flags in allocation loop 2026-04-07 15:38:35 +02:00
iwlwifi wifi: iwlwifi: validate SEC_RT TLV minimum size 2026-07-18 22:37:38 +03:00
Kconfig
Makefile