[PATCH v2 0/3] wifi: wlcore: fix OOB reads from firmware event fields

From: Tristan Madani

Date: Wed Apr 15 2026 - 18:29:53 EST


From: Tristan Madani <tristan@xxxxxxxxxxxxxxxxxxx>

Hi Johannes,

Note: this is a v2 resubmission. The original was sent via Gmail which
caused HTML rendering issues. This version uses git send-email for
proper plain-text formatting.

Three issues in wlcore/wl18xx where firmware-controlled fields are used
as array indices or buffer offsets without validation:

Proposed fixes in the following patches.

Thanks,
Tristan