[PATCH] wifi: ath11k: validate regulatory capability phy_id
Jeff Johnson
jeff.johnson at oss.qualcomm.com
Tue Jul 14 11:08:03 PDT 2026
On Sat, 04 Jul 2026 09:10:40 +0800, Pengpeng Hou wrote:
> ath11k_wmi_tlv_ext_hal_reg_caps() copies firmware regulatory
> capability records into soc->hal_reg_cap[] using reg_cap.phy_id as
> the destination index. The loop count is bounded by num_phy, but the
> phy_id embedded in each record is not checked against the fixed
> MAX_RADIOS-sized destination array.
>
> Reject firmware records whose phy_id does not fit soc->hal_reg_cap[]
> before copying the parsed capability.
>
> [...]
Applied, thanks!
[1/1] wifi: ath11k: validate regulatory capability phy_id
commit: de4685d422a69a61f67e2e2ffdb5747d73d51308
Best regards,
--
Jeff Johnson <jeff.johnson at oss.qualcomm.com>
More information about the ath11k
mailing list