Files
linux/drivers
Ping-Ke Shih e072210330 wifi: rtw89: fw: safely cast mfw_hdr pointer from firmware->data
Check size of struct mfw_hdr within firmware->size before type casting
to ensure to validly dereference fields from mfm_hdr pointer. Then,
check if signature field is equal to RTW89_MFW_SIG to assert current
is multi-firmware.

Addresses-Coverity-ID: 1494046 ("Untrusted loop bound")
Addresses-Coverity-ID: 1544385 ("Untrusted array index read")

Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
Link: https://patch.msgid.link/20250217064308.43559-6-pkshih@realtek.com
2025-02-21 09:51:43 +08:00
..
2024-11-05 05:33:46 +01:00
2025-01-18 17:10:05 -08:00
2024-11-15 00:32:29 +11:00
2024-11-12 15:48:08 +01:00