Re: [PATCH v2] staging: rtl8723bs: fix ie_length bound check in rtw_cfg80211_inform_bss

[Dan Carpenter]

On Thu, Oct 01, 2026 at 10:51:00PM +0530, Adi Prasan wrote:
> Sorry for the late reply.
> On where ie_length gets set - there's three places: collect_bss_info() in
> rtw_mlme_ext.c, and the two H2C_PARAMETERS_ERROR checks further down in the
> same file. All three cap it to MAX_IE_SZ before it's ever assigned, so it
> can't actually go out of bounds.
> 
> On a more sensible limit instead of MAX_BSSINFO_LEN.what do you have in
> mind?

Please don't top post.

Why not use MAX_IE_SZ as the limit?

regards,
dan carpenter