Baochen Qiang <quic_bqiang@xxxxxxxxxxx> wrote: > len is extracted from HTT message and could be an unexpected value in > case errors happen, so add validation before using to avoid possible > out-of-bound read in the following message iteration and parsing. > > The same issue also applies to ppdu_info->ppdu_stats.common.num_users, > so validate it before using too. > > These are found during code review. > > Compile test only. > > Signed-off-by: Baochen Qiang <quic_bqiang@xxxxxxxxxxx> > Acked-by: Jeff Johnson <quic_jjohnson@xxxxxxxxxxx> > Signed-off-by: Kalle Valo <quic_kvalo@xxxxxxxxxxx> Patch applied to ath-next branch of ath.git, thanks. 1bc44a505a22 wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() -- https://patchwork.kernel.org/project/linux-wireless/patch/20230901015602.45112-1-quic_bqiang@xxxxxxxxxxx/ https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches