On Thu, Mar 14, 2024 at 05:21:12PM -0500, Chenyuan Yang wrote: > We are curious whether `event_len` is guaranteed to be greater than or > equal to `tlv_len + sizeof(rpt->header)` in each iteration since we > found that `sizeof(struct mwifiex_ie_types_header) == > sizeof(rpt->header)`. You have the code available to look at just as well as we do. I don't see any such guarantee on first glance. Patches welcome as always. https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches Brian