Re: [PATCH] wifi: ath11k: validate regulatory capability phy_id
Jeff Johnson <[email protected]> Tue, 14 Jul 2026 11:08:03 -0700
| Newsgroups | org.infradead.lists.ath11k,org.kernel.vger.linux-kernel,org.kernel.vger.linux-wireless |
|---|---|
| Message-ID | <[email protected]> |
On Sat, 04 Jul 2026 09:10:40 +0800, Pengpeng Hou wrote:
> ath11k_wmi_tlv_ext_hal_reg_caps() copies firmware regulatory
> capability records into soc->hal_reg_cap[] using reg_cap.phy_id as
> the destination index. The loop count is bounded by num_phy, but the
> phy_id embedded in each record is not checked against the fixed
> MAX_RADIOS-sized destination array.
>
> Reject firmware records whose phy_id does not fit soc->hal_reg_cap[]
> before copying the parsed capability.
>
> [...]
Applied, thanks!
[1/1] wifi: ath11k: validate regulatory capability phy_id
commit: de4685d422a69a61f67e2e2ffdb5747d73d51308
Best regards,
--
Jeff Johnson <[email protected]>