Brian Norris <[email protected]> wrote: > ath10k_hw_diag_fast_download() generally has good boundary checking, but > it misses verifying that the next metadata header actually fits in the > remaining buffer space. Add such a check. > > Fixes: 39501ea64116 ("ath10k: download firmware via diag Copy Engine for > QCA6174 and QCA9377.") > Signed-off-by: Brian Norris <[email protected]> > Signed-off-by: Kalle Valo <[email protected]>
Patch applied to ath-next branch of ath.git, thanks. e720ba1dcc33 ath10k: add missing sanity check on diag download -- https://patchwork.kernel.org/patch/10610975/ https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
