Luca Coelho <luca@xxxxxxxxx> wrote: > From: Johannes Berg <johannes.berg@xxxxxxxxx> > > We shouldn't trust the firmware with the sizes (or contents) > of notifications, accessing too much data could cause page > faults if the data doesn't fit into the allocated space. This > applies more on older NICs where multiple notifications can > be in a single RX buffer. > > Add a general framework for checking a minimum size of any > notification in the RX handlers and use it for most. Some RX > handlers were already checking and I've moved the checks, > some more complex checks I left and made them _NO_SIZE for > the RX handlers. > > Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx> > Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx> 11 patches applied to iwlwifi-next.git, thanks. afc857bc2a71 iwlwifi: mvm: add notification size checks 1e1a58bec773 iwlwifi: mvm: check more notification sizes 88181e6e21c4 iwlwifi: mvm: remove debugfs injection limitations 96a603803deb iwlwifi: mvm: scan: fix scheduled scan restart handling f7d6ef33a779 iwlwifi: mvm: handle CCA-EXT delay firmware notification d4e3a341b87b iwlwifi: mvm: add support for new flush queue response 25edc8f259c7 iwlwifi: pcie: properly implement NAPI 3161a34d659b iwl-trans: iwlwifi: move sync NMI logic to trans fcc2622cb237 iwlwifi: dbg: dump paged memory from index 1 6275c77e77b2 iwlwifi: remove TRANS_PM_OPS 00520b7a2a13 iwlwifi: mvm: don't check system_pm_mode without mutex held
