diff options
| author | Pengpeng Hou <pengpeng@iscas.ac.cn> | 2026-08-30 20:48:10 +0800 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2026-09-04 12:14:26 +0200 |
| commit | f2e8260ad4093f9921b07686eb5cc027c38b1c7d (patch) | |
| tree | 56bb231462e5657a9176a7ad3c5e213dd1058be4 /scripts/Makefile.thinlto | |
| parent | b4572cc9483054dbe0371768bf4075ab4b6c2168 (diff) | |
| download | linux-next-f2e8260ad4093f9921b07686eb5cc027c38b1c7d.tar.gz linux-next-f2e8260ad4093f9921b07686eb5cc027c38b1c7d.zip | |
wifi: libertas_tf: validate firmware block extents
check_fwfile_format() reads each block header and trusts its data length
before proving that both fit in the firmware image. A truncated header or
oversized block can therefore pass malformed extents to the download path.
Require the remaining image to contain the complete header and payload
before accepting each block.
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Link: https://patch.msgid.link/20260830124810.97223-1-pengpeng@iscas.ac.cn
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions