linux-kernel - [PATCH 0/3] wifi: cap a few SSID lengths

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <cover.1756456951.git.dan.carpenter@linaro.org>
Date: Fri, 29 Aug 2025 15:48:22 +0300
From: Dan Carpenter <dan.carpenter@...aro.org>
To: Marc Bornand <dev.mbornand@...temb.ch>
Cc: Bjorn Helgaas <bhelgaas@...gle.com>, Felix Fietkau <nbd@....name>,
	Johannes Berg <johannes.berg@...el.com>,
	Johannes Berg <johannes@...solutions.net>,
	"John W. Linville" <linville@...driver.com>,
	libertas-dev@...ts.infradead.org, linux-kernel@...r.kernel.org,
	linux-wireless@...r.kernel.org,
	Roopni Devanathan <quic_rdevanat@...cinc.com>,
	Solomon Peachy <pizza@...ftnet.org>
Subject: [PATCH 0/3] wifi: cap a few SSID lengths

These patches are based on static analysis and review.  The other places
which get the ssid from ieee80211_bss_get_ie() do bounds checking to
ensure that the ssid length isn't more than IEEE80211_MAX_SSID_LEN (32).

Dan Carpenter (3):
  wifi: cw1200: cap SSID length in cw1200_do_join()
  wifi: libertas: cap SSID len in lbs_associate()
  wifi: cfg80211: sme: capp SSID length in __cfg80211_connect_result()

 drivers/net/wireless/marvell/libertas/cfg.c | 9 ++++++---
 drivers/net/wireless/st/cw1200/sta.c        | 2 +-
 net/wireless/sme.c                          | 5 ++++-
 3 files changed, 11 insertions(+), 5 deletions(-)

-- 
2.47.2