[PATCH v3 0/2] staging: rtl8723bs: fix OOB write in HT_caps_handler and OOB read in OnAssocRsp

[Alexandru Hossu]

v3, addressing Dan Carpenter's and Luka Gejak's feedback on v2.

Greg, please drop your patch and take this one instead.

Changes from v2:
 - 1/2: switch from min_t() to umin() (Dan Carpenter)
 - 1/2: keep truncation approach rather than reverting to early
   return; early return bypasses HT_caps_enable = 1, silently
   disabling HT mode for APs that append extra bytes to the HT
   Capabilities IE (Luka Gejak, AI review)
 - 1/2: expand commit message to document the early return tradeoff
 - 1/2: add changelog with links to AI review and Greg's v1 reply

2/2 is unchanged from v2.

Alexandru Hossu (2):
  staging: rtl8723bs: fix OOB write in HT_caps_handler()
  staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop

 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c  | 4 ++++
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 ++-
 2 files changed, 6 insertions(+), 1 deletion(-)

-- 
2.53.0