Dan Carpenter <dan.carpenter@xxxxxxxxxx> wrote:
> The value for "aid" comes from skb->data so Smatch marks it as
> untrusted. If it's invalid then it can result in an out of bounds array
> access in ath6kl_add_new_sta().
>
> Fixes: 572e27c00c9d ("ath6kl: Fix AP mode connect event parsing and TIM updates")
> Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
> Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
Patch applied to ath-next branch of ath.git, thanks.
54f9ab7b8709 ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
--
https://patchwork.kernel.org/patch/11712551/
https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
