On Thu, 2024-05-16 at 20:23 -0400, Kenton Groombridge wrote: > req->n_channels must be set before req->channels[] can be used. > Additionally, memory addresses after the "channels" array need to be > calculated from the allocation base ("request") instead of the first > "out of bounds" index of "channels" to avoid a runtime bounds check > warning. Thanks. Can you please drop the cfg80211 parts from this to match the subject, the code there is broken in other ways too, I have a fix for all of that: https://patchwork.kernel.org/project/linux-wireless/patch/20240510113738.4190692ef4ee.I0cb19188be17a8abd029805e3373c0a7777c214c@changeid/ johannes