netdev - Re: wfx: Memory corruption during high traffic with WFM200 on i.MX6Q platform

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <2646104.mvXUDI8C0e@pc-42>
Date:   Thu, 15 Sep 2022 12:19:43 +0200
From:   Jérôme Pouiller <jerome.pouiller@...abs.com>
To:     linux-wireless@...r.kernel.org, netdev@...r.kernel.org,
        Paweł Lenkow <pawel.lenkow@...lingroup.com>,
        Lech Perczak <lech.perczak@...lingroup.com>
Cc:     Kalle Valo <kvalo@...nel.org>,
        Krzysztof Drobiński 
        <krzysztof.drobinski@...lingroup.com>,
        Kirill Yatsenko <kirill.yatsenko@...lingroup.com>
Subject: Re: wfx: Memory corruption during high traffic with WFM200 on i.MX6Q platform

On Thursday 15 September 2022 11:56:24 CEST Lech Perczak wrote:
> Hi Jérôme,
> 
> Just a quick note, so you don't have to redo our work - Paweł found the root cause,
> patch is coming very shortly.
> 
> TL;DR is that hw->max_rates in wfx_init_common was set to 8 initially,
> which is over the maximum of 4 specified by mac80211,
> causing out-of-bounds writes all over the place.

Wow, thank you. I was about to jump deep in your traces. You saved my
day.


-- 
Jérôme Pouiller