linux/drivers/net/wireless
Johannes Berg b02f8d5a71 wifi: iwlwifi: limit printed string from FW file
[ Upstream commit e0dc2c1bef ]

There's no guarantee here that the file is always with a
NUL-termination, so reading the string may read beyond the
end of the TLV. If that's the last TLV in the file, it can
perhaps even read beyond the end of the file buffer.

Fix that by limiting the print format to the size of the
buffer we have.

Fixes: aee1b6385e ("iwlwifi: support fseq tlv and print fseq version")
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://patch.msgid.link/20250209143303.cb5f9d0c2f5d.Idec695d53c6c2234aade306f7647b576c7e3d928@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
History 2025-03-13 12:58:28 +01:00
..
admtek wifi: mac80211: add wake_tx_queue callback to drivers 2022-10-10 11:00:03 +02:00
ath wifi: ath12k: fix handling of 6 GHz rules 2025-02-21 13:57:17 +01:00
atmel Fix nomenclature for USB and PCI wireless devices 2023-08-25 12:56:49 +03:00
broadcom wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() 2025-02-17 09:40:21 +01:00
cisco wifi: airo: avoid uninitialized warning in airo_get_rate() 2023-07-11 19:22:54 -07:00
intel wifi: iwlwifi: limit printed string from FW file 2025-03-13 12:58:28 +01:00
intersil wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() 2024-12-09 10:32:00 +01:00
legacy Fix nomenclature for USB and PCI wireless devices 2023-08-25 12:56:49 +03:00
marvell wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() 2024-12-09 10:32:04 +01:00
mediatek wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 2025-02-17 09:40:22 +01:00
microchip wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings 2024-12-09 10:31:35 +01:00
purelifi wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async() 2024-01-25 15:35:19 -08:00
quantenna wifi: qtnfmac: use struct_size and size_sub for payload length 2023-03-13 15:44:29 +02:00
ralink wifi: rt2x00: correct wrong BBP register in RxDCOC calibration 2024-02-05 20:14:18 +00:00
realtek wifi: rtw88: sdio: Fix disconnection after beacon loss 2025-02-17 09:40:22 +01:00
rsi wifi: rsi: rsi_91x_usb_ops: Remove unnecessary (void*) conversions 2023-08-23 14:07:16 +03:00
silabs wifi: wfx: Fix error handling in wfx_core_init() 2024-12-09 10:32:07 +01:00
st wifi: cw1200: Avoid processing an invalid TIM IE 2024-08-29 17:33:24 +02:00
ti wifi: wlcore: fix unbalanced pm_runtime calls 2025-02-08 09:51:57 +01:00
virtual wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings 2024-12-09 10:31:35 +01:00
zydas Fix nomenclature for USB and PCI wireless devices 2023-08-25 12:56:49 +03:00
Kconfig wifi: move raycs, wl3501 and rndis_wlan to legacy directory 2023-03-13 15:42:14 +02:00
Makefile wifi: move raycs, wl3501 and rndis_wlan to legacy directory 2023-03-13 15:42:14 +02:00