diff options
| author | Shahar Tzarfati <shahar.tzarfati@intel.com> | 2026-07-15 21:57:08 +0300 |
|---|---|---|
| committer | Miri Korenblit <miriam.rachel.korenblit@intel.com> | 2026-07-16 21:12:18 +0300 |
| commit | 9d7657aae8c1579584c67b0b66114a6a98db8b2f (patch) | |
| tree | 3c1f0ba4be6e37d83626335a9ffba06d65e470e9 /include/linux/timerqueue_types.h | |
| parent | daec24a5ed5da77a108e246ad77aa8b889911f93 (diff) | |
wifi: iwlwifi: mvm: fix read in wake packet notification handler
In iwl_mvm_wowlan_store_wake_pkt(), packet_len was initialized from
notif->wake_packet_length before the explicit check that len >=
sizeof(*notif).
Move the assignment of packet_len to after the size check so that
notif->wake_packet_length is only accessed once the payload length
has been validated.
Fixes: 219ed58feda9 ("wifi: iwlwifi: mvm: Add support for wowlan wake packet notification")
Signed-off-by: Shahar Tzarfati <shahar.tzarfati@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://patch.msgid.link/20260715215523.99d5cf85a528.Ic4aa736011d4fe88e0cd19723d1d48bb24642198@changeid
Diffstat (limited to 'include/linux/timerqueue_types.h')
0 files changed, 0 insertions, 0 deletions