Brian Norris <briannorris@xxxxxxxxxxxx> wrote:
> ath10k_hw_diag_fast_download() generally has good boundary checking, but
> it misses verifying that the next metadata header actually fits in the
> remaining buffer space. Add such a check.
>
> Fixes: 39501ea64116 ("ath10k: download firmware via diag Copy Engine for QCA6174 and QCA9377.")
> Signed-off-by: Brian Norris <briannorris@xxxxxxxxxxxx>
> Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
Patch applied to ath-next branch of ath.git, thanks.
e720ba1dcc33 ath10k: add missing sanity check on diag download
--
https://patchwork.kernel.org/patch/10610975/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
