Ping-Ke Shih e072210330 wifi: rtw89: fw: safely cast mfw_hdr pointer from firmware->data ...

Check size of struct mfw_hdr within firmware->size before type casting
to ensure to validly dereference fields from mfm_hdr pointer. Then,
check if signature field is equal to RTW89_MFW_SIG to assert current
is multi-firmware.

Addresses-Coverity-ID: 1494046 ("Untrusted loop bound")
Addresses-Coverity-ID: 1544385 ("Untrusted array index read")

Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
Link: https://patch.msgid.link/20250217064308.43559-6-pkshih@realtek.com

2025-02-21 09:51:43 +08:00

..

arcnet

…

bonding

bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL

2024-12-12 11:59:18 +01:00

caif

…

can

can: grcan: move napi_enable() from under spin lock

2025-01-13 19:05:11 -08:00

dsa

net: dsa: felix: report timestamping stats from the ocelot library

2025-01-17 20:01:10 -08:00

ethernet

eth: bnxt: fix string truncation warning in FW version

2025-01-18 17:32:45 -08:00

fddi

…

fjes

net: fjes: use ethtool string helpers

2024-10-31 19:36:59 -07:00

hamradio

…

hippi

…

hyperv

hv_netvsc: Replace one-element array with flexible array member

2025-01-17 19:07:48 -08:00

ieee802154

Merge tag 'ieee802154-for-net-2025-01-03' of git://git.kernel.org/pub/scm/linux/kernel/git/wpan/wpan

2025-01-04 17:00:44 -08:00

ipa

…

ipvlan

ipvlan: Support bonding events

2025-01-10 18:10:24 -08:00

mctp

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2025-01-09 16:11:47 -08:00

mdio

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-12-19 11:35:07 -08:00

netdevsim

net: add netdev_lock() / netdev_unlock() helpers

2025-01-15 19:13:33 -08:00

pcs

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2025-01-16 10:34:59 -08:00

phy

net: phy: remove leftovers from switch to linkmode bitmaps

2025-01-18 17:40:10 -08:00

plip

…

ppp

…

pse-pd

net: pse-pd: Clean ethtool header of PSE structures

2025-01-14 13:56:33 +01:00

slip

…

team

team: prevent adding a device which is already a team device lower

2025-01-03 11:56:40 +00:00

thunderbolt

…

usb

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-12-19 11:35:07 -08:00

vmxnet3

…

vxlan

net: vxlan: rename SKB_DROP_REASON_VXLAN_NO_REMOTE

2024-12-23 10:11:04 -08:00

wan

net: wan: framer: Simplify API framer_provider_simple_of_xlate() implementation

2024-12-15 14:13:56 -08:00

wireguard

wireguard: device: support big tcp GSO

2024-11-18 19:32:27 -08:00

wireless

wifi: rtw89: fw: safely cast mfw_hdr pointer from firmware->data

2025-02-21 09:51:43 +08:00

wwan

net: wwan: iosm: Fix hibernation by re-binding the driver around it

2025-01-15 17:39:54 -08:00

xen-netback

…

amt.c

net: convert to nla_get_*_default()

2024-11-11 10:32:06 -08:00

bareudp.c

bareudp: Handle stats using NETDEV_PCPU_STAT_DSTATS.

2024-12-06 17:56:53 -08:00

dummy.c

rtnetlink: Remove __rtnl_link_register()

2024-11-11 17:26:51 -08:00

eql.c

…

geneve.c

geneve: Handle stats using NETDEV_PCPU_STAT_DSTATS.

2024-12-06 17:56:52 -08:00

gtp.c

gtp: Prepare ip4_route_output_gtp() to .flowi4_tos conversion.

2025-01-17 19:01:33 -08:00

ifb.c

rtnetlink: Remove __rtnl_link_register()

2024-11-11 17:26:51 -08:00

Kconfig

…

LICENSE.SRC

…

loopback.c

net: loopback: Hold rtnl_net_lock() in blackhole_netdev_init().

2025-01-15 14:20:08 -08:00

macsec.c

macsec: inherit lower device's TSO limits when offloading

2024-11-11 14:12:21 -08:00

macvlan.c

ndo_fdb_del: Add a parameter to report whether notification was sent

2024-11-15 16:39:18 -08:00

macvtap.c

…

Makefile

…

mdio.c

mdio: Remove mdio45_ethtool_gset_npage()

2024-11-14 19:08:55 -08:00

mhi_net.c

…

mii.c

…

net_failover.c

…

netconsole.c

netconsole: Warn if MAX_USERDATA_ITEMS limit is exceeded

2025-01-09 18:06:36 -08:00

netkit.c

netkit: Allow for configuring needed_{head,tail}room

2025-01-06 09:48:49 +01:00

nlmon.c

…

ntb_netdev.c

…

pfcp.c

pfcp: Destroy device along with udp socket's netns dismantle.

2025-01-14 11:20:04 +01:00

rionet.c

…

sb1000.c

…

Space.c

…

sungem_phy.c

…

tap.c

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

2024-12-18 17:55:30 -08:00

tun.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-12-19 11:35:07 -08:00

veth.c

xdp: get rid of xdp_frame::mem.id

2024-12-12 18:22:52 -08:00

virtio_net.c

virtio_net: ensure netdev_tx_reset_queue is called on bind xsk for tx

2024-12-10 11:22:21 +01:00

vrf.c

vrf: Make pcpu_dstats update functions available to other modules.

2024-12-06 17:56:52 -08:00

vsockmon.c

…

xen-netfront.c

xen/netfront: fix crash when removing device

2024-12-13 09:12:24 +01:00