Re: [PATCH net] wifi: cfg80211: Fix out-of-bounds in cfg80211_wext_siwscan

[Johannes Berg]

On Sun, 2024-06-23 at 17:49 +0900, Jeongjun Park wrote:
> In the process of searching for matching hardware channels, wreq and 
> wreq->num_channels are checked to see if they are NULL. However, 
> if the value of wreq->num_channels is greater than IW_MAX_FREQUENCIES,
> an out-of-bounds vulnerability occurs.
> 
> Therefore, you must also add code to check whether the value of 
> wreq->num_channels is within the range.
> 

This is the same more or less as 

https://msgid.link/20240531032010.451295-1-dmantipov@xxxxxxxxx

no?

johannes