[PATCH v2 0/2] wifi: b43: fix OOB read and infinite loop from hardware-reported values

Tristan Madani tristmd at gmail.com
Wed Apr 15 15:24:23 PDT 2026


From: Tristan Madani <tristan at talencesecurity.com>

Hi Johannes,

Note: this is a v2 resubmission. The original was sent via Gmail which
caused HTML rendering issues. This version uses git send-email for
proper plain-text formatting.

Two issues in b43 where hardware-reported values are used without
bounds checking:

Proposed fixes in the following patches.

Thanks,
Tristan




More information about the b43-dev mailing list