From: Joshua Klinesmith <joshuaklinesmith@gmail.com>
To: linux-wireless@vger.kernel.org
Cc: nbd@nbd.name, lorenzo@kernel.org, ryder.lee@mediatek.com,
shayne.chen@mediatek.com, sean.wang@mediatek.com,
Joshua Klinesmith <joshuaklinesmith@gmail.com>
Subject: [PATCH wireless v2 0/2] wifi: mt76: validate WCID index before WTBL lookup
Date: Tue, 7 Apr 2026 01:39:01 -0400 [thread overview]
Message-ID: <20260407053903.75861-1-joshuaklinesmith@gmail.com> (raw)
Validate WCID indices from TX free events and TX status reports
before WTBL lookups in mt7915 and mt7996, matching the bounds
checks already present in mt7615/mt7921/mt7925 drivers.
Changes since v1:
- When a pair lookup fails (out-of-range or non-station WCID),
also clear the carried wcid/sta/link_sta state so that
subsequent non-pair MSDU and header entries in the same TX free
event do not attribute statistics or pass a stale station
pointer to mt76_connac2_txwi_free().
Joshua Klinesmith (2):
wifi: mt76: mt7915: validate WCID index before WTBL lookup
wifi: mt76: mt7996: validate WCID index before WTBL lookup
drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 14 +++++++++++++-
drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 10 ++++++++++
2 files changed, 23 insertions(+), 1 deletion(-)
--
2.43.0
next reply other threads:[~2026-04-07 5:39 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-04-07 5:39 Joshua Klinesmith [this message]
2026-04-07 5:39 ` [PATCH wireless v2 1/2] wifi: mt76: mt7915: validate WCID index before WTBL lookup Joshua Klinesmith
2026-04-07 5:39 ` [PATCH wireless v2 2/2] wifi: mt76: mt7996: " Joshua Klinesmith
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260407053903.75861-1-joshuaklinesmith@gmail.com \
--to=joshuaklinesmith@gmail.com \
--cc=linux-wireless@vger.kernel.org \
--cc=lorenzo@kernel.org \
--cc=nbd@nbd.name \
--cc=ryder.lee@mediatek.com \
--cc=sean.wang@mediatek.com \
--cc=shayne.chen@mediatek.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox