]> git.hungrycats.org Git - linux/commit
wifi: brcmfmac: validate bsscfg indices in IF events
authorPengpeng Hou <pengpeng@iscas.ac.cn>
Mon, 23 Mar 2026 07:45:51 +0000 (15:45 +0800)
committerJohannes Berg <johannes.berg@intel.com>
Tue, 7 Apr 2026 10:34:20 +0000 (12:34 +0200)
commit304950a467d83678bd0b0f46331882e2ac23b12d
tree17be601347dfbd373edebde52fa08e45ed8820fc
parent12cd7632757a54ce586e36040210b1a738a0fc53
wifi: brcmfmac: validate bsscfg indices in IF events

brcmf_fweh_handle_if_event() validates the firmware-provided interface
index before it touches drvr->iflist[], but it still uses the raw
bsscfgidx field as an array index without a matching range check.

Reject IF events whose bsscfg index does not fit in drvr->iflist[]
before indexing the interface array.

Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Acked-by: Arend van Spriel <arend.vanspriel@broadcom.com>
Link: https://patch.msgid.link/20260323074551.93530-1-pengpeng@iscas.ac.cn
[add missing wifi prefix]
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c