From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wm1-f42.google.com (mail-wm1-f42.google.com [209.85.128.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 732173876B8 for ; Wed, 15 Apr 2026 22:24:28 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.42 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776291869; cv=none; b=o4vONgn8k1OlJTm19t2l07W2wAwfflsS1WtOvcz0st8rkFZP55bDKkYQ2VYFBTCorVQTgrXRs9Ush2CCDg7XlboiwKYG8ituxwvQ58SnsNwBqGq9QTXX9lqpn4xpyWWpTlDC8QuN0XbSUIy2uOxju7wESsxpXvzDt27dLd78vbY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776291869; c=relaxed/simple; bh=I4P/KPSPk79n8En4cUv+2weHLeKZt0NTU8vFr8mQscA=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=R3J5kIw0wEcUJOm2suricsGnqcVw5NyUOn71AwbRLE+/CjP+NFYQ8XzDkC4LzRlVkYuYBMnH+QJVcoPe7etMHqOThiZpzjbqHALpKA6KFoUsVZmDdXQyrs0EncsDP913bYhttFTBclgWqtz+Qtjg0lGC8wCcQcl4fA92w5sW+0s= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=WALNlVFj; arc=none smtp.client-ip=209.85.128.42 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="WALNlVFj" Received: by mail-wm1-f42.google.com with SMTP id 5b1f17b1804b1-488b150559bso57648315e9.1 for ; Wed, 15 Apr 2026 15:24:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1776291867; x=1776896667; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=I4P/KPSPk79n8En4cUv+2weHLeKZt0NTU8vFr8mQscA=; b=WALNlVFjWoMQdvMwG29I1QVlwVMPBp7A9amVngNTEPt1FJYsqpae4oMaaRO+zzz4Np WPERn8bsqMVqa+aY+aX5PrgQ+oG3aV82RcNbqjCvcoLzeXism59ZqgJvOe75H5FOP8f+ 5xWEZvLftS5N/HlDZxfijG4GkrGsw0stThe9vqU1duseVPCl+deV0pLEKPCs+SIPRUh/ EoVnJRg3sEf3r645dLHT/v5O8HhcCxRy4xCHHgSMylHP/8i+92wgYkVu+0xt0Nq0Eqws l4S/dHBdiya1pjS39ZpShqPDDQ9e94toImSy9YdVHVZTWlV7iGz/b9DHHjhvNoyq90Gn neCg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776291867; x=1776896667; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=I4P/KPSPk79n8En4cUv+2weHLeKZt0NTU8vFr8mQscA=; b=pxiMjgc4nTaTjqQSFrKoOI3CU344fLEup8AzEQsFHOcwAPZkg4jNfqZkneeblQBZvu j16enfHkRZOE3UG8oY4IVtOFnfEjaBXBmP91tloIQNdkje1yJuXH6w12ZNyBDzjSlV7u yOP+1kXTHK/4XcC3ys0cETfV6XvRkIboV+RD8Mx6PZm/zaKoeBwvCDIp5F31zL0g7Z/i wiQNIu+s5MyfJh/sJv1AsZD028bMXLC6Ur/3sCSWSHKPkFXjp2Sz6UCl2qmGCESjE7Ou ctFzzgaqoUHVPTDG3PVlULl+EFnqI7MO9ymcqV5MN9lIXv0ucq0DASZd7tdt5HaOodYt +IcA== X-Forwarded-Encrypted: i=1; AFNElJ+bfOEowrx/vkCv9oQK8DHykhjrH6tG93vnG+qOd1I6UHmYQm1auAlLeesNQFuoMcoTahVUXeBRQ9/wt0Q=@vger.kernel.org X-Gm-Message-State: AOJu0Yz8yDywT6uvw+Qg9bWtQYCttOtURBLjdFjEg2/6TPVRailMhQWw /woZw9IOH/KbLvtz7DLEWzSEJ9MMy06dL45U9TLaJvKgcmSUO6GdLCI= X-Gm-Gg: AeBDiesjuxqiG27ZG6rCthMOpW4Rf1wKAMBZDPJHHU0iAR8ol8elD4cp2JX9ULN9Z2g 3MpG6XtGfEeusvG6yySt8QML2xhSZNv1O9DxP0G4SaBTJOIfF+FRMN4EG8EVumhyemlPiIf8+Fe jDyMVseQPVo+KNXuRw5v0MWCbIO2ALolIereV7MqFblVPex41yBGkkeTdi4z3VIUArQGjaCVlCc 9MN6566u6vOQYna45HIZfCqIMoUhgkbQ4FAP7bJtUUtMYdjddvMF2/33g8c3LO1CK0fmnooXGeC XFfMMBZiVH4owd6CTH/MVBvGDMeCyAIbdSsgSJQpQkTS0516RSu6K0QnH+jeKJg3VmlCIEvT+bl g+smDl3NNYzJQiVk4z74dU4Hrelg/Ayjc35FcCC+7nD76GIrRm9NiEmVEVCicS+MXe/9bz9zo3R alB48= X-Received: by 2002:a05:600d:12:b0:485:2ce2:4c87 with SMTP id 5b1f17b1804b1-488d67df3f9mr262213745e9.4.1776291866925; Wed, 15 Apr 2026 15:24:26 -0700 (PDT) Received: from debian.. ([2001:41d0:303:db6b::]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-488f5813954sm1896615e9.3.2026.04.15.15.24.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 15 Apr 2026 15:24:26 -0700 (PDT) From: Tristan Madani To: Johannes Berg Cc: linux-wireless@vger.kernel.org, b43-dev@lists.infradead.org, linux-kernel@vger.kernel.org Subject: [PATCH v2 0/2] wifi: b43: fix OOB read and infinite loop from hardware-reported values Date: Wed, 15 Apr 2026 22:24:23 +0000 Message-ID: <20260415222425.1544638-1-tristmd@gmail.com> X-Mailer: git-send-email 2.47.3 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: Tristan Madani Hi Johannes, Note: this is a v2 resubmission. The original was sent via Gmail which caused HTML rendering issues. This version uses git send-email for proper plain-text formatting. Two issues in b43 where hardware-reported values are used without bounds checking: Proposed fixes in the following patches. Thanks, Tristan