Re: [PATCH net] wifi: cfg80211: Fix out-of-bounds in cfg80211_wext_siwscan
From: Johannes Berg
Date: Tue Jun 25 2024 - 07:55:32 EST
On Sun, 2024-06-23 at 17:49 +0900, Jeongjun Park wrote:
> In the process of searching for matching hardware channels, wreq and
> wreq->num_channels are checked to see if they are NULL. However,
> if the value of wreq->num_channels is greater than IW_MAX_FREQUENCIES,
> an out-of-bounds vulnerability occurs.
>
> Therefore, you must also add code to check whether the value of
> wreq->num_channels is within the range.
>
This is the same more or less as
https://msgid.link/20240531032010.451295-1-dmantipov@xxxxxxxxx
no?
johannes