diff options
| author | Pengpeng Hou <pengpeng@iscas.ac.cn> | 2026-07-15 21:57:50 +0800 |
|---|---|---|
| committer | Miri Korenblit <miriam.rachel.korenblit@intel.com> | 2026-07-15 20:51:44 +0300 |
| commit | f051995c539582b05276abda4c5874fd4cafd2a5 (patch) | |
| tree | 12b6f3fc9c87c4f34ed32618657e6edde1a9d97b /tools/perf/scripts/python/flamegraph.py | |
| parent | 7410e4548a17bd868dfc60b48f2e78eacde3ad78 (diff) | |
wifi: iwlwifi: validate UEFI reduced-power SKU TLV length
iwl_uefi_reduce_power_parse() reads an iwl_sku_id from an
IWL_UCODE_TLV_PNVM_SKU payload after only checking that the generic TLV
payload is present.
A short type-specific payload can therefore make the three data[] reads
extend beyond the TLV. Reject SKU TLVs shorter than the structure before
accessing it.
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Link: https://patch.msgid.link/20260715135916.24417-2-pengpeng@iscas.ac.cn
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Diffstat (limited to 'tools/perf/scripts/python/flamegraph.py')
0 files changed, 0 insertions, 0 deletions