[PATCH v2 0/3] wifi: carl9170: fix buffer overflow and OOB reads in firmware response handling

From: Tristan Madani

Date: Wed Apr 15 2026 - 18:26:23 EST


From: Tristan Madani <tristan@xxxxxxxxxxxxxxxxxxx>

Hi Christian,

Note: this is a v2 resubmission. The original was sent via Gmail which
caused HTML rendering issues. This version uses git send-email for
proper plain-text formatting.

Three issues in carl9170 firmware response handling.

Changes since v1:
- Patch 1/3 (cmd_callback memcpy): bound with min_t() instead of early
return after carl9170_restart(), per your feedback.

Proposed fixes in the following patches.

Thanks,
Tristan